PDA

View Full Version : trojan simulator


waters
January 12th, 2005, 03:30 PM
Downloaded trojan simulator 1.
scaned with kav and then e trust promo ,they reported nothing .
scaned with ewido and it detected.
why didnt the others detect

LowWaterMark
January 12th, 2005, 03:33 PM
Not all products detect trojan simulator's kit. It is not an industry accepted standard, just something put out by one vendor. Many vendors did decided to include detection for it, probably because their customers asked, but many have not.

Bubba
January 12th, 2005, 03:56 PM
Along with LWM's comments....you may wish to read MagnusM's comments concerning his intentions behind the release of this test trojan back in January 2003.

Just Released: Trojan Simulator 1.0 (http://www.broadbandreports.com/forum/remark,5507340~mode=flat~days=9999~start=30#5514554)-{ Quote: "Hi,

I thought I'd clarify the purpose of the trojan simulator a little. The program was created because, up until now, there has really been no way to verify that your security software is indeed working short of actually downloading and running a real trojan. The aim when designing Trojan Simulator was to capture the essence of how a real remote access trojan operates. This first version is purposely kept simple so that the basic functionality is there for you to test your security software without there being a million bells and whistles. It allows you to test the file scanning, memory scanning and registry scanning ability of your security software. For example, one poster posted a screenshot of Registry Prot intercepting the autostart entry. Perhaps he had been running the program before without knowing if it was working. Now he knows it does." }-

muf
January 12th, 2005, 07:44 PM
I asked Kaspersky about this about 18 months ago. They said that as it's harmless, they didn't bother to include it in their database.

muf