Virus testing

[variable125]

Thanks so much for closing the thread sport. Ok I will rephrase my question - does anyone know of any applications that test virii signatures but are NOT the whole virus. There must be something used to test the efficacy of virus scanners.

[ronjor]

variable125

Please read the terms of service here on the forum so there will be no misunderstanding.

"You agree not to post any links to warez sites or sites from which malware (viruses, worms, trojans, backdoors etc.) can be downloaded."

http://www.wilderssecurity.com/TOS-Privacy.html

http://www.eicar.org is home of the antivirus test files. Safer than taking a chance of getting infected.

Here is another app that is safe and may or may not be detected by your antivirus scanner. It will depend on whether or not they have added detection of this particular file.

http://www.misec.net/trojansimulator/

[Jimbob1989]

Originally Posted by ronjor

http://www.eicar.org is home of the antivirus test files. Safer than taking a chance of getting infected.

Usefull website, thanks.

Jimbob

[variable125]

I read the link, I understand your concern. I should have been more clear. The Eicar.com site may be the ticket. I have also been able to find a site with live viruses. Unfortunately for me, the boss said he wanted a realistic test with real viruses. I am simply following orders.

Nothing like living on the edge..

[Jimbob1989]

Originally Posted by variable125

I read the link, I understand your concern. I should have been more clear. The Eicar.com site may be the ticket. I have also been able to find a site with live viruses. Unfortunatley for me, the boss said he wanted a realistic test with real viruses. I am simply following orders.

Nothing like living on the edge..

I would make sure your test is as secure and confined as possible if you have to use live viruses. Disconnect internet connection, etc.

Jimbob

[kareldjag]

Hi,

I have a personal collection of malwares, very useful to test pretentious security softwares...

***For Various125
More informations to collecting decodes files in order to test AV's spectres:

http://www.virus.gr/english/fullxml/default.asp

***For JimBob and others members

If someone wants to test his AV with many varieties of the Eicar test:
Just some french sites which present various files of eicar and referenced by ICSA/NCSA (so no malicious sites at all).

* http://securite-informatique.info/virus/eicar/

*The site of Marc Blanchard, an expert of virus working for Trend Micro:

http://www.attac.net/tester.html

For instance, the last one is an interesting test (java applet: NoisyBear.class):
If your AV does not alert you when the download start, it means that you're not as well protected against malicious codes .

Almost because Rage Against The ...Virus.

Regards

[Jimbob1989]

My comment about disconnecting the internet was actually to prevent spreading of viruses when testing. Assuming you are using seriously dangerous viruses.

Jimbob