Internet Security University Project

Fordicus · 03-04-2005, 15:56

Hello all, I'm currently in the process of completing my dissertation, which is a guide on internet security. It isdesigned for people who have little technical or computer knowledge however it should also have enough 'meat' for the more internet savvy.

Right now its background infomation discusses viruses in general, however I have proposed that I experiment with a few viruses to understand better what they do and how. What I need however are the viruses to use.

I have rigged up an isolated laptop which will be the target, I'm after any virus that isnt destructive to the hardware. I have noticed some threads about msn spread viruses which would be ideal.

The plan for this type would be to setup 2 test msn accounts and watch as the pif file is sent from one account to another, try out arious ways of removal etc.

If anyone could send me these pif files I would be very grateful, if you can please zip them up first and send them to jonnyford@ntlworld.com which will be serving as the test account (no virus checkers will be in place on the laptop receiving these, the same applies for any virus that need activating through opening the file with its name and what it does.

Any thoughts on this idea would be appricated too, or potential sources where I can seek these out.

Thanks

paulyoung666 · 03-04-2005, 16:40

hi and

to the site , it is a novel approach isuppose , but a very brave one to post your e-mail addy in a public forum hopeing that you will get what you want and not something really nasty that may trash something

, hope you enjoy your stay here

homealone · 03-04-2005, 16:47

hi

don't know if you have heard of this

http://www.eicar.org/anti_virus_test_file.htm

or whether it is what you are after, but it might be worth a look

**Rob M** · 03-04-2005, 17:27

I've got a copy of the Snow White virus saved on a floppy, I can email you that if you like.

Actually, thinking about it, is it actually legal to intentionally distribute a virus via email?
__________________

Sorry, where are my manners today?

to CF Fordicus

__________________

Be careful when you download that Icar file though.....

I just downloaded it and now I can't delete it

My AV software won't let the system have access to it to delete it

Fordicus · 06-04-2005, 23:49

Thanks for the warm welcome guys,

Yes it is quite brave but the email account has been setup specifically for this project and the computer reciving the email will be formatted after this anyway, so no worries

Raistlin, that would ne awsome if you could sent that virus to me. Very good point with the legal question, I did some research into that... I couldnt find anything specific, but I found that it is not legal to spread dangerous programs with the intent on causing harm... however the intention here is not to cause harm, so I'm pretty sure its legal.

That test virus file I think will be very useful for the project as a whole Homealone, nice one for the link.

Oh heres a copy of hte 1st prototype, if anyone could have a read through and give a little review that would be very useful. It is designed for those with little knowledge but a critcal apprisal from more experienced people would also be great.

here it is

Note: it has yet to be proof read so appogies if there is bad english.

Toto · 07-04-2005, 07:19

Quote:

Originally Posted by Fordicus

Thanks for the warm welcome guys,

Yes it is quite brave but the email account has been setup specifically for this project and the computer reciving the email will be formatted after this anyway, so no worries

Raistlin, that would ne awsome if you could sent that virus to me. Very good point with the legal question, I did some research into that... I couldnt find anything specific, but I found that it is not legal to spread dangerous programs with the intent on causing harm... however the intention here is not to cause harm, so I'm pretty sure its legal.

That test virus file I think will be very useful for the project as a whole Homealone, nice one for the link.

Oh heres a copy of hte 1st prototype, if anyone could have a read through and give a little review that would be very useful. It is designed for those with little knowledge but a critcal apprisal from more experienced people would also be great.

here it is

Note: it has yet to be proof read so appogies if there is bad english.

Hi Fordicus, let me please add my welcome.

One slight problem with the email viruses is that ntl block them at server level to any virus attachment sent to an ntlworld email address.

You may want to set up another email account with a network that does not employ AV checking at server level.

Hope that helps, and all the best with your report.

Also, you may want to discuss the issue with the ntl AUP team, they can be contacted via this link, there is an option in there to raise a security related enquiry.

www.ntlworld.com/netreport

Peter_Stanley · 09-04-2005, 21:22

Quote:

Originally Posted by Toto

One slight problem with the email viruses is that ntl block them at server level to any virus attachment sent to an ntlworld email address.

Does NTL's email scanner check inside password protected zip files though? This may be a way around the problem and allows a nice legal disclaimer, e.g. This zip file contains a virus intended for educational/research purposes. Open the file at your own risk. The password is...

Toto · 09-04-2005, 21:26

Quote:

Originally Posted by Peter_Stanley

Does NTL's email scanner check inside password protected zip files though? This may be a way around the problem and allows a nice legal disclaimer, e.g. This zip file contains a virus intended for educational/research purposes. Open the file at your own risk. The password is...

Couldn't tell you to be honest.