CMPC
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Anti-virus tester

3 posters

Go down

Anti-virus tester Empty Anti-virus tester

Post by Corey Fri Jan 08, 2010 4:01 am

I wrote a program awhile ago to test the speed and auto-detection of AV software. Apparently, it's illegal for me to put on dropbox or the forum (it's harmless, it just -simulates- a virus). MP me if you want a copy to test your AV. I'll even guve you the source to show it's safe.
Corey
Corey
Mod

Posts : 462

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Unchained Fri Jan 08, 2010 9:15 am

I'm intrigued, simulates how?
Unchained
Unchained
Mod

Posts : 448

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Corey Mon Jan 11, 2010 2:21 am

The file is basically a malware dropper. It drops Eicar on the user's computer.
http://www.eicar.org/anti_virus_test_file.htm
The eicar file is stored in the exe itself, so it isn't downloaded from the internet.
Corey
Corey
Mod

Posts : 462

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Unchained Mon Jan 11, 2010 7:05 am

I must say that's pretty awesome. How does it measure effectiveness? Personally I'd check every second or so if the file exists and have it counting up until it doesn't.

Mind sending me the source/exe?
Unchained
Unchained
Mod

Posts : 448

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Corey Tue Jan 12, 2010 3:48 am

Well, the way of testing effectiveness is how long it takes for the AV to pop up and scream at you. The timing is more manual, you just press a key when it comes up. Unfortunately, it's illegal to send you it. I -might- be able to put the source up though. Oh well, use it responsibly.

Code:

dim testfile as string
testfile = "X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*"
open "im_a_scary_virus.boo" for output as #1
print #1 , testfile
close #1
print "Test virus launched."
print "You should now see a warning about 'im_a_scary_virus.boo'"
print "If you don't see a waring within 30 seconds, get a new anti-virus!"
print "Press any key to delete the test file."
sleep
kill "im_a_scary_virus.boo"
print "Virus deleted."
sleep 1000
Corey
Corey
Mod

Posts : 462

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Paul Tue Jan 12, 2010 4:18 am

Where exactly did you find out that it would be illegal for you to send that to someone?
Paul
Paul
Pickaxe

Posts : 611

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Corey Tue Jan 12, 2010 5:25 am

Hmmm... I can't find the original article I read it in, but basically, it falls under "Distribution of Known Malware", even if it's a harmless test file downloaded with the user's knowledge.
Corey
Corey
Mod

Posts : 462

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Paul Tue Jan 12, 2010 11:45 pm

Yeah that makes sense. . .

. . .It's both surprising and scary how many computer crimes are felonies. . .
Paul
Paul
Pickaxe

Posts : 611

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Unchained Wed Jan 13, 2010 1:22 am

To the best of my knowledge, viruses and such are actually only crimes if both parties don't consent to the transfer and execution. Viruses fall under property damage, and you can consent for someone to hit your car with a sledgehammer, but most people don't.
Unchained
Unchained
Mod

Posts : 448

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Corey Wed Jan 13, 2010 1:32 am

Lol. "Sure you can destroy my car!"
Corey
Corey
Mod

Posts : 462

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Unchained Wed Jan 13, 2010 1:34 am

Haha yea luckily computers are a lot harder to destroy with viruses.
Unchained
Unchained
Mod

Posts : 448

Back to top Go down

Anti-virus tester Empty Re: Anti-virus tester

Post by Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum