obfuscated trojan
The Obfuscator 1.0.1
The Obfuscator converts your email address into an encoded string more>> The Obfuscator converts your email address into an encoded string
Studies say 97% of spam (no, not Spam?) happens because you posted your email address to a web page somewhere?The Obfuscator to the rescue!
The Obfuscator converts your email address into an encoded string that spambots cant read, but web browsers and email programs can!
For convenience, your obfuscated string is automagically copied to the clipboard.
Enhancements
- Fixed trailing newline issue when copying data to the clipboard (thanks Ben Kazez!).
obfuscate4e 0.7.1.200906021638
An Eclipse feature for obfuscate plug-ins during their export more>> <<less
CheckMate 1.0 Beta3
Generate and compare secure MD5 checksums of critical files more>>
Checkmate is a preference pane for MacOS X 10.1 or higher that allows you to generate and compare secure MD5 checksums of critical files. This can be used to detect whether these files have been altered by viruses, root kits, trojan horses, or other possibly malicious programs.
NOTE: The choice of files that are checked by default was derived by examining a number of other file system checksumming (or tripwire-type) systems on other UNIX-like platforms. If you believe that there are other OSX-specific files that should get checked for malicious alteration, please send me your suggestions for possible inclusion.
Major Features:
- Checksum validation can be run manually from inside the preference pane, and/or scheduled to run hourly, daily, weekly, monthly, or each time you restart.
- If the validation process finds any files whose checksums don't match the values stored, several notification options can be triggered, including a popup dialog and email.
- In addition to the default list of files that are included for validation, you can easily add and remove additional files that you wish to validate.
- You can also export the list of file checksums to a file to be stored somewhere other than the computer it was made on (such as on your iDisk).
- You can then later load this externally-stored file back into the preferences panel to verify that the checksum
This can be used to detect whether these files have been altered by viruses, root kits, trojaniServices Trojan Removal Tool 1.1
Removes iWork & Photoshop trojan horse spyware. more>>
iServices Trojan Removal Tool 1.1 allows you to remove the iWorkServices Trojan horse from infected Macintosh computers running Mac OS X. This tool is in response to a new spyware trojan horse (OSX.Trojan.iServices.A) in the wild that comes bundled with pirated copies of Apple's (AAPL) iWork 09. When infected copies of the iWork 09 installer are run, they install a hidden trojan program called iWorkServices with full access rights to the target computer. Once the trojan is installed, it will attempt to connect to a remote server and provide the server with the infected computer's network location. It then listens for further instructions from the remote server, which may include instructions to download additional components. iWorkServices Trojan removal tool will remove this malware.
Trojan Wrangler 1.0
Trojan Wrangler is a simple to use, yet sophisticated utility which scans media files for the resources that Mac OS X uses to locate code. more>>
Trojan Wrangler 1.0 is a simple to use, yet sophisticated utility which scans media files for the resources that Mac OS X uses to locate code. There's some concern that Trojan horse programs can be hidden in certain media files (MP3, AAC, GIF, JPEG). There are plenty of other ways to disguise programs as other sorts of files so unsuspecting users can be tricked into running them, but if this particular issue is a concern Trojan Wrangler will let you scan any downloaded media files for hidden code.
nhTrojanDetector 1.0
nhTrojanDetector is such a small yet very useful application that helps to detect Trojan Horses, malign programs disguised in files. more>>
nhTrojanDetector 1.0 is such a small yet very useful application that helps to detect Trojan Horses, malign programs disguised in files. Usually a Trojan Horse has an extension of type .mp3 or .jpg, etc., to mislead the user.
- Mac OS X 10.2 or later.
Zebra scanner 2.0.2
Zebra scanner - Scan your Mac for trojans more>>
Zebra scanner is intended to search for applications, hidden behind another extension than app . It checks if any of the files in the selected folder(s) has either the real extension .app or the file type APPL. In Mac OS >= 10.3 the program also checks if the item is considered an executable by the OS which can be activated by double-click or otherwise.
The program is meant to be a fast and easy way to retrieve trojan viruses, disguised as an image, MP3, movie, folder etc. thus avoiding that a hidden application can be double clicked by accident and do damage to your Computer. Zebra scanner can also examine classic data.
Enhancements:
- Tiger compatibility.
Zebra Scanner is a userfriendly, secure and reliable application to trace down trojan viruses ... to trace down trojan viruses. Trojans, description; A Trojan refers to a program that appearsThe Achaean 1.0.2
The Achaean - Find & remove MP3 and other media viruses more>>
The Achaean supports all major audio, video and image formats, although MP3 files are most subject to housing a trojan because the trojans executable code can be easily hidden inside their ID3 tags.
Enhancements:
- Fixed bug preventing The Achaean from launching on some machines.
JunkMatcher 1.6.1
JunkMatcher - Spam filter add-on for Mail.app more>>
JunkMatcher can be added to Mail.app as a rule so it can be used hand-in-hand with Mail.apps built-in (statistical) junk filter. Users can decide what actions to take on the matched messages (mark as junk/read/flagged/colored, move them to Junk/Trash mailbox etc.).
A self-contained GUI - JunkMatcher Central is also included so you can conduct "Email forensics": testing and building your regular expression patterns, browsing the log file of the past matchings, etc. You can even report spam to SpamCop.net directly from the log window. Many settings are also available in it so you can customize the entire matching process to your hearts content.
Enhancements:
- Bug fixed: Fixed an installation issue for users upgrading from 1.5.8 or earlier. If everything has worked for you, you dont need to upgrade to this version.
- There are many new features introduced in 1.6.0; make sure you read about them here
- Added SpamBayes "Happy Meal Plan" (automatic balanced training): If turned on (default, in the Test Inspector) SpamBayes will try to feed itself with yummy spam/ham in a balanced way - this happens even when SpamBayes property test is not turned on to make sure SpamBayes will learn from the results of the other tests. Due to this addition the SpamBayes property test is now turned on by default.
- Added the ability to correct JunkMatcher directly from Mail.app (save a trip to JunkMatcher.app): Just do what you usually do - click on the "junk bag" icon in Mail.apps toolbar, choose "Mark as Junk Mail" item in Mail.apps contextual menu, or move a message into/out of a Junk mailbox etc. Your action will be automatically reflected in the Log window of JunkMatcher.app.
- Added UI to set ham/spam cutoff values for SpamBayes (in the Test Inspector): Each cutoff value is a positive number between 0.0 and 1.0 (exclusive), and ham cutoff < spam cutoff. Any message with probability > spam cutoff (computed by SpamBayes of course) will be considered spam, and any message with probability < ham cutoff will be considered "definite" ham. The rest are classified as "unsure", but currently "unsure" is synonymous with "ham". :-)
- Added a new preference setting "Filter the test table if Match All finds positive(s)" (default is off). If you turn it on, after you apply a "Match All" in the Analyzer window, the search field will be automatically filled with string "test:matched" to filter the test table so you only see the positive tests. Clearing out the search field will show you the complete list of tests again.
- JunkMatcher now remembers which messages you have used for training, and will skip them if you try to retrain on them.
- Log entries are now color-coded in the "Received Date" column to indicate their training status; they will be automatically updated when you finish training.
- When doing a "Match All" in JunkMatcher.app with SpamBayes property test turned on, the "Last Match All" field in the Test Inspector window now shows the probability computed for the message even if the message is *ham*.
- Added a menu item under View: Inspect SpamBayes (cmd-opt-B). It will open the Test Inspector window on SpamBayes property test directly.
- Improved the speed of training processes.
- Improved stability when configuring JunkMatcher while matching is underway in Mail.app.
- Behavior changed: If you already have "JunkMatcher" rule in Mail.app, the installation process will not try to alter its settings (e.g., whether you want to color matched messages, what color you want, and whether you want to move the messages to Junk folder etc.).
- Bug fixed: MD5 keys of incoming emails were not computed in a consistent way.
- Bug fixed: When JunkMatcher.app is running, doing a "Match All" immediately after training sometimes did not use the latest training result.
- Bug fixed: When log is automatically recycled while JunkMatcher.app is running, making corrections to the subsequent log entries in the same session would cause errors.
- Bug fixed: Sometimes saving tests in JunkMatcher.app while Mail.app is running would produce a bunch of "A test is AWOL" error messages in the console.
- Many other GUI enhancements and dead bugs.
- JunkMatcher Howto website is again updated with much more information.
hardscan 1.0
Utility to detect open ports if netstat may be compromised more>> Utility to detect open ports if netstat may be compromised
Hardscan is a local netstat replacement that scans for open ports the hard way: by binding to each of them and attempting to handshake with itself.
Hardscan is meant to be useful in a situation where you may have been rooted, rendering the output of netstat and other security tools untrustworthy.
If the program is unable to handshake with itself, for whatever reason (perhaps something intercepted the handshake, perhaps something was already running on that port, etc) it is an indicator that tcp or udp port being checked is already in use.
Although this could be a trojan, virus, or hacker connection, it is also quite possible that it is a legitimate connection.
As the "Ephemeral" high-numbered ports are scanned as well, there is a chance that any outgoing activity (for instance browsing the web while the scan is running) will be picked up.
Of particular note in this program is "--fast" mode. In this state, the scanner does not attempt to handshake with itself, and thusly is not detecting as rigorously.
In theory the OS could be lying to the scanner and simply saying that the socket was opened succesfully, but in practice most trojans are not going to be that sophisticated. Fast mode trades off this verification in order to run much, much, much faster.
System requirements:
- Python
Tommy Cam Widget 1.0
A dashboard widget that provides live images with Tommy Trojan, the life-sized bronze statue, an USC’s collegiate symbol. more>> <<less
jbytecode 0.4
Free and open source Java bytecode disassembler for your Mac more>> Free and open source Java bytecode disassembler for your Mac
jbytecode is a Java bytecode disassembler/assembler written in Python.
Dissasembly code is aligned with Java bytecodes in the class file so modification and re-assembly is always possible, even when class is obfuscated.
Enhancements
- Code refactoring.
Cerberius 1.0
Cerberius - Makes sure files are not hidden executables more>>
Every time a file is downloaded, it checks whether the file put into its folder really is what it claims to be.
The download folder must be set to be this folder. Other shady files from other sources (CD-ROM, file sharing...) can be dropped into the Cerberius folder to be checked. When a file cannot be trusted, it is placed in the Trash; the user is then notified, and can empty the Trash if they wish so.
PPSee 1.21
PPSee is a software for creating picture galleries of photos taken by the digital camera, scanner etc more>>
Main features:
- the program uses national languages.
- the photo album provides automatic picture projection - slide show
- to move among the pictures in the photo album you can use navigation keys.
- each of the pictures can contain your description, which is saved for later use.
- you can rotate images without any modification of the original file
- photo album is based on a valid code XHTML 1.0 Strict
- the photo album does not need support from any server.
- the program has many attributes affecting the look of the created photo album.
- support of the scripting language BeanShell for greater latitude when creating the photo album.
- you can create their own templates of the photo album.
- registered users can use a batch mode from a command line
- the program can read EXIF information.
- the program runs on the systems such as Windows, Linux, MacOS, OS/2 and Solaris, as well as the photo album.
- registered users can also use new versions of the program.
- the author does not insert into program any form of malware, including: spyware, trojans and backdoors.
Enhancements:
- Photo album is created by a standard XHTML 1.0 Strict.
- You can rotate images without any modification of the original file.
- Bug fixing.
whatPorts 1.1
whatPorts is a multi-threaded port scanner written in cocoa more>>
The scanner will cycle the ports on the host entered, and report back any ports that are open, attempting to match the port with its registered port database to determine the service that is most likely running on that port.
If the service can be determined, then it will inform you, otherwise, it will tell that it is unknown. Tests have shown that this scanner tends to run significantly faster than the scanner shipped with OS X, also, it goes one step beyond by telling you what service is most likely running on that port.
Enhancements:
- This version added a descriptive progress indicator, a port lookup database to determine the service running on a given port, and a tighter scanning algorythm.
- Also now allows any host to be scanned, not just the local host.
- Page: 1 of 2
- 1
- 2
