RE: [pen] Anti virus testing

["Douglas Friess" <DFriess@xxxxxxxxxxxxxxxx>]

Seen that one, had been using AVG to clean it up on client workstations.
I tried out the eicar.com test virus and it wiped it effortlessly, but
it is three years old and well known.

DFriess

-----Original Message-----
From: Swamphandy [mailto:swamphandy@xxxxxxxxx] 
Sent: Friday, November 21, 2008 9:16 AM
To: pen@xxxxxxxxxxxxxxxxxx
Subject: Re: [pen] Anti virus testing

There is a sweet virus out there that is very likely to chew up your
antivirus and spit it out.

Get yourself infected with "Windows xp antivirus" or "Windows xp
antivirus 2008". It snuck past AVG in a nano-second and screwed my
winXP Pro box very nicely.

Have fun.

-sw

On Thu, Nov 20, 2008 at 11:56 PM, Douglas Friess
<DFriess@xxxxxxxxxxxxxxxx> wrote:
> I was thinking of just doing a google search for porn and just
clicking on everything in sight.
>
>
> ________________________________
>
> From: agent69 [mailto:agent69@xxxxxxxxx]
> Sent: Thu 11/20/2008 9:06 PM
> To: pen@xxxxxxxxxxxxxxxxxx
> Subject: Re: [pen] Anti virus testing
>
>
>
> Easy, just start installing malware like a n00b. If you want some let
me know ; )
>
>
>
>
>
>
>
> On Thu, Nov 20, 2008 at 7:42 PM, Douglas Friess
<DFriess@xxxxxxxxxxxxxxxx> wrote:
>
>
>        Been there, what I'm testing isn't listed, its VIPRE from
Sunbelt. I have to do some live testing on a virtual win 2008 network
with a standard load out of the common client software. Really annoying
getting to the "but does it catch viruses" part and not being able to
give a ready answer.
>
>        ________________________________
>
>        From: Gavin Hanover [mailto:gavin@xxxxxxxxxxx]
>        Sent: Thu 11/20/2008 7:33 PM
>        To: pen@xxxxxxxxxxxxxxxxxx
>        Subject: Re: [pen] Anti virus testing
>
>
>
>        http://www.virusbtn.com/news/2008/09_02
>
>        they already did it for you
>
>
>        On Thu, Nov 20, 2008 at 5:28 PM, Douglas Friess
<DFriess@xxxxxxxxxxxxxxxx> wrote:
>
>
>               Where can I find a neutered virus sample pack to tested
some anti vrus software.  Hell, I'd settle for a not so neutered one
too, since this is a VM off of the network and to be wiped after
testing.
>
>               DFriess
>
>
>
>
>        --
>        In God we trust,
>        Everyone else must have an X.509 certificate.
>
>
>
>
>