trojan
Trojan Wrangler 1.0
Trojan Wrangler is a simple to use, yet sophisticated utility which scans media files for the resources that Mac OS X uses to locate code. more>>
Trojan Wrangler 1.0 is a simple to use, yet sophisticated utility which scans media files for the resources that Mac OS X uses to locate code. There's some concern that Trojan horse programs can be hidden in certain media files (MP3, AAC, GIF, JPEG). There are plenty of other ways to disguise programs as other sorts of files so unsuspecting users can be tricked into running them, but if this particular issue is a concern Trojan Wrangler will let you scan any downloaded media files for hidden code.
nhTrojanDetector 1.0
nhTrojanDetector is such a small yet very useful application that helps to detect Trojan Horses, malign programs disguised in files. more>>
nhTrojanDetector 1.0 is such a small yet very useful application that helps to detect Trojan Horses, malign programs disguised in files. Usually a Trojan Horse has an extension of type .mp3 or .jpg, etc., to mislead the user.
- Mac OS X 10.2 or later.
iServices Trojan Removal Tool 1.1
Removes iWork & Photoshop trojan horse spyware. more>>
iServices Trojan Removal Tool 1.1 allows you to remove the iWorkServices Trojan horse from infected Macintosh computers running Mac OS X. This tool is in response to a new spyware trojan horse (OSX.Trojan.iServices.A) in the wild that comes bundled with pirated copies of Apple's (AAPL) iWork 09. When infected copies of the iWork 09 installer are run, they install a hidden trojan program called iWorkServices with full access rights to the target computer. Once the trojan is installed, it will attempt to connect to a remote server and provide the server with the infected computer's network location. It then listens for further instructions from the remote server, which may include instructions to download additional components. iWorkServices Trojan removal tool will remove this malware.
hardscan 1.0
Utility to detect open ports if netstat may be compromised more>> Utility to detect open ports if netstat may be compromised
Hardscan is a local netstat replacement that scans for open ports the hard way: by binding to each of them and attempting to handshake with itself.
Hardscan is meant to be useful in a situation where you may have been rooted, rendering the output of netstat and other security tools untrustworthy.
If the program is unable to handshake with itself, for whatever reason (perhaps something intercepted the handshake, perhaps something was already running on that port, etc) it is an indicator that tcp or udp port being checked is already in use.
Although this could be a trojan, virus, or hacker connection, it is also quite possible that it is a legitimate connection.
As the "Ephemeral" high-numbered ports are scanned as well, there is a chance that any outgoing activity (for instance browsing the web while the scan is running) will be picked up.
Of particular note in this program is "--fast" mode. In this state, the scanner does not attempt to handshake with itself, and thusly is not detecting as rigorously.
In theory the OS could be lying to the scanner and simply saying that the socket was opened succesfully, but in practice most trojans are not going to be that sophisticated. Fast mode trades off this verification in order to run much, much, much faster.
System requirements:
- Python
Zebra scanner 2.0.2
Zebra scanner - Scan your Mac for trojans more>>
Zebra scanner is intended to search for applications, hidden behind another extension than app . It checks if any of the files in the selected folder(s) has either the real extension .app or the file type APPL. In Mac OS >= 10.3 the program also checks if the item is considered an executable by the OS which can be activated by double-click or otherwise.
The program is meant to be a fast and easy way to retrieve trojan viruses, disguised as an image, MP3, movie, folder etc. thus avoiding that a hidden application can be double clicked by accident and do damage to your Computer. Zebra scanner can also examine classic data.
Enhancements:
- Tiger compatibility.
Novice Software - Zebra Scanner is a userfriendly, secure and reliable application to trace down trojan viruses. Zebra Scanner. Zebra Scanner 2 is a userfriendly, secure and reliableThe Achaean 1.0.2
The Achaean - Find & remove MP3 and other media viruses more>>
The Achaean supports all major audio, video and image formats, although MP3 files are most subject to housing a trojan because the trojans executable code can be easily hidden inside their ID3 tags.
Enhancements:
- Fixed bug preventing The Achaean from launching on some machines.
Tommy Cam Widget 1.0
A dashboard widget that provides live images with Tommy Trojan, the life-sized bronze statue, an USC’s collegiate symbol. more>> <<less
TCstripper 1.1
TCstripper scans files for inappropriate Type & Creator (potential trojan horses) more>>
TCstripper is an AppleScript droplet to check if files with document file extensions (eg. MP3, PDF, JPG) contain Mac OS Type & Creator information which enables the file to execute potentially malicious code if openend by double clicking or Cmd-O in the Finder.
TCstripper allows to check multiple files, folders, and nested folders at once by drag&drop.
TCstripper identifies suspicious files and then offers to trash it or to deactivate the inappropriate Type & Creator info so the file can be openend without the ability to execute code which can be hidden in ID3 tags of MP3 files for example.
Enhancements:
- Added: Ability to process nested folders
- Added: Ability to trash files
- Added: Ability to skip files
- Added: Quit dialog
- Added: ReadMe.
ChkRootKit_MacOSX 0.47.5
ChkRootKit - Detect worms/trojans/viruses more>>
For extended explanations, consult web site of "chkrootkit" - http://www.chkrootkit.org/
chkrootkit 0.48
Open source tool to check for signs of a rootkit on your Mac more>> Open source tool to check for signs of a rootkit on your Mac
chkrootkit is a free and open source security tool to locally check for signs of a rootkit.
chkrootkit has been tested on: Mac OS X, Linux 2.0.x, 2.2.x, 2.4.x and 2.6.x, FreeBSD 2.2.x, 3.x, 4.x and 5.x, NetBSD 1.6.x, OpenBSD 2.x, 3.x and 4.x., Solaris 2.5.1, 2.6, 8.0 and 9.0, HP-UX 11, Tru64, and BSDI.
chkrootkit comes with the following tools:
- chkrootkit: shell script that checks system binaries for rootkit modification.
- ifpromisc.c: checks if the interface is in promiscuous mode.
- chklastlog.c: checks for lastlog deletions.
- chkwtmp.c: checks for wtmp deletions.
- check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
- chkproc.c: checks for signs of LKM trojans.
- chkdirs.c: checks for signs of LKM trojans.
- strings.c: quick and dirty strings replacement.
- chkutmp.c: checks for utmp deletions.
Enhancements
- new tests: common SSH brute force scanners, suspicious PHP files
- enhanced tests: login, netstat, top, backdoor
- some minor bug fixes
DownloadCheck 1.0
DownloadCheck - Simple utility that checks for applications in your Downloads folder more>>
DownloadCheck is an application that checks for applications in your Downloads folder. It was written in response to the MP3Concept Trojan horse release of April 2004. See John Grubers excellent commentary on this Trojan and the controversy/hype that it generated.
Technical Details
Its likely that youll never find a MP3 or other document type masquerading as an application. Most transport mechanisms on the Internet will not preserve the resource fork of the file being downloaded. Without the resource fork, the MP3Concept Trojan, and others like it, will not work. DownloadCheck is released as a deterrent for anyone who might consider writing an exploit of this type. We hope that well never need to use it.
KirkyKitty Screensaver 1
KirkyKitty Screensaver is a program showing Bubbles from aqua plants and wandering cute fishes on the desktop. more>>
KirkyKitty Screensaver 1 is a program showing Bubbles from aqua plants and wandering cute fishes on the desktop. This is a freeware screensaver. This application does not contain viruses, trojan horses or any code which can damage your Operating System and do not steal any data from your computer.
DNSChanger Removal Tool 2.0
Scan your computer for the DNSChanger trojan horse. more>>
DNSChanger Removal Tool 2.0 is an effective tool which can scan your computer for the DNSChanger trojan horse and alert you if it is detected. The DNSChanger Trojan Horse, also known as OSX.RSPlug.A and OSX/Puper, has been found on numerous pornographic websites disguising itself as a video codec. Once downloaded and installed, DNSChanger changes the DNS settings on the computer, redirecting websites entered by the user to malicious sites. If personal information is entered on these malicious websites, it can lead to identity theft.
Upon launching DNSChanger Removal Tool, click the Scan button to scan for the DNSChanger trojan horse. If the DNSChanger trojan horse is detected, DNSChanger Removal Tool will give you the option to remove it. If the DNSChanger trojan horse is detected and removed, you will need to restart your computer to clear out the bad DNS entries added by the DNSChanger Trojan Horse.
iAntiVirus Free Edition 1.36
iAntiVirus Free Edition 1.36 is a useful tool, which can help you protect your PC and your personal information from the most nefarious cyber-threats. more>>
iAntiVirus Free Edition 1.36 is a useful tool, which can help you protect your PC and your personal information from the most nefarious cyber-threats. iAntiVirus provides free real-time protection and comprehensive system scanning to ensure your Mac remains safe and virus free. The iAntiVirus database has been designed from the ground up to detect and remove Mac specific threats. This enables a high level of protection whilst keeping memory footprint and resource usage at a minimum.
The iAntiVirus database is not cluttered with signatures for Windows specific threats which your Mac is already immune against. This means you get the protection you need without the extra resource required to process the threats that are not relevant your Mac. iAntiVirus protects you against Mac specific viruses, worms, Trojans, keyloggers, dialers, spyware, adware, toolbars and hijackers like the Mac DNS-Changer trojan. Version 1.2 improves performance and fixes conflict with Time Machine.
Major Features:
- A variety of scan options
- You may perform a variety of scan types using iAntiVirus, this allows you to strike a balance between the time taken to complete a scan, and its thoroughness.
- Real-time protection
- IntelliGuard protects your Mac against infections in real time. Whenever an infection is detected and blocked, an alert is displayed below the system menu bar. IntelliGuard automatically places detected infections in quarantine, works silently in the background and uses minimal system resources.
- Quarantine
- iAntiVirus quarantines all detected infections, allowing you to easily view and restore items in the case of a false positive (for example: when scanning with engine heuristics set to high).
- Automatic Smart Updates
- Frequent updates to detect and guard computers against new threats and viruses as well as provide enhancements to iAntiVirus are automatically installed and downloaded through the Smart Update function. Threat signatures are updated within hours of a high risk malware outbreak to protect you from the latest online threats.
- Low resource usage
- When in monitoring mode iAntiVirus has been designed to work silently in the background, threats are blocked and removed without any system impact, while only a small alert window is displayed to advise you that your Mac has been protected against an attack
Bye_Leap-A 1.0
Bye_Leap-A - Automator script to defeat Leap-A more>>
Thanks to Macworld.com for the removal process.
Enhancements:
- Initial Release.
- Page: 1 of 2
- 1
- 2
