omniumnetworking
asked on
Where can i download viruses/malware for a test environment?
Hello! This is an odd request - I am trying to set up a test environment where I can test various anti-virus and anti-malware products. Apart from the tedious process of going to the sources of malware, does anyone know of any repository of viruses and malware for this purpose?
SteveH_UK
I don't know where you can download them from, but you could try getting McAfee SiteAdvisor. Then, it marks sites in red if they have problems, and lets you know what the problem is. So you could then do an obviously bad search on Google and spot the red links!
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This exact question was asked a few weeks ago.
In addition to all of the comments about not being allowed to post such sites, the best suggestion was to load a 'test' computer (non-networked) without any security software - then surf some gambling and porn sites.
You can be sure that computer will be full of infected files in about 20 minutes.
I think that the suggestion was made half-way in jest, but it is true.
Vic
In addition to all of the comments about not being allowed to post such sites, the best suggestion was to load a 'test' computer (non-networked) without any security software - then surf some gambling and porn sites.
You can be sure that computer will be full of infected files in about 20 minutes.
I think that the suggestion was made half-way in jest, but it is true.
Vic
Yeah, don't rely on a virtual machine to protect you. Use isolated kit.
Do a Google search for:
"EICAR Standard Anti-Virus Test File"
Leave the quotes around the query.
"EICAR Standard Anti-Virus Test File"
Leave the quotes around the query.
But the EICAR test virus won't help you to compare anti-virus products.
@SteveH_UK,
That all depends on the test parameters. The file was designed for, and is used by, researchers in the anti-virus field. It's a *lot* safer than purposely trying to get infected with a live virus in the wild.
That all depends on the test parameters. The file was designed for, and is used by, researchers in the anti-virus field. It's a *lot* safer than purposely trying to get infected with a live virus in the wild.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you're determined to get a live one, don't forget Bittorrents.
souseran. I agree that the EICAR virus is a good bet for testing that your antivirus software is functioning, but since it is the one all a/v systems are tested against it doesn't demonstrate where one engine is more effective against new viruses in the wild.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Absolutely agree souseran. Given that the user is attempting to test antivirus products, presumably for comparison, I thought it prudent to point out the limitations with using the EICAR virus. Of course it isn't particularly wise to attempt to get a virus on any equipment, and I agree that the researchers do a thorough job. I was attempting to answer the original question, not advocate a course of action.
For my money I would either establish a complete, secure test environment (retrieving quarantined viruses from e-mail, for example, without Internet access) or else I would use industry reviews. But neither of those answer the original question.
For my money I would either establish a complete, secure test environment (retrieving quarantined viruses from e-mail, for example, without Internet access) or else I would use industry reviews. But neither of those answer the original question.
ASKER
Thanks for the input!
@SteveH_UK,
:-) With virii and things that can potentially do significant damage, I tend to point out possible courses of action. Saves us from later answering questions about how to fix whatever got broke. But you are correct, and your response definitely answers the original question.
:-) With virii and things that can potentially do significant damage, I tend to point out possible courses of action. Saves us from later answering questions about how to fix whatever got broke. But you are correct, and your response definitely answers the original question.
souseran. It's not a bad policy that you operate :)