[brillobo]

Does someone here know of an internet site or sites that have "dummy" Trojans, Backdoors, Keyloggers, Worms, Viruses, Spyware, Adware and/or Rootkits to test computer security programs?

I googled and found only (~25 sites/1 download):

"Test My Firewall" at http://www.testmyfirewall.com/,
"Jason's Toolbox" at http://www.jasons-toolbox.com/TestEmail/MailSent.asp, "GFI Email Security Testing Zone" at http://www.gfi.com/emailsecuritytest/?
Symantec Security Check at http://security.symantec.com/sscv6/d...d=ie&venid=sym
PC Security Test download at http://www.pc-st.com/us/index.htm (download.com review 3.5/5 rating)
Audit My PC Firewall, Anonymous, Popup Tests at http://www.auditmypc.com/firewall-test.asp
Shields Up at http://www.grc.com/x/ne.dll?rh1dkyd2 (Several tests.)
Browser Security Test at http://bcheck.scanit.be/bcheck/
GFI Email Security Testing Zone at http://www.gfi.com/emailsecuritytest/ (~15 tests)
Eicar anti-virus test at http://www.eicar.org/anti_virus_test_file.htm (2 yrs old, checks only if AV scanner is running)
Wi-Fi Security Test at http://www.jiwire.com/wifi-security-test.htm

Some of them actually work pretty well, but there must/should be others. Such online tests would get zillions of hits > $$. Perfect job for out-of-work hackers.

I'd pay for this service, seriously. There should be as many INDEPENDENT security testing sites as there are security programs. With frequent updates, for two reasons: malware is being updated as I type, and the security programs would "update" their programs very quickly to catch the dummies... to improve their scores.

I want to KNOW if all these security programs that I have so diligently researched, installed, configured and updated, and updated, actually work? They offer "Tips" to maximize security efficacy. BS, I want tests. Real tests of my security software.

And wouldn't it be a kick to make the screen light up and set off sirens and alarm bells when "dummy malware" is detected? That is, of course, if security software actually works.

Reliable, controlled testing of my defenses against an evolving external enemy that could potentially trash my computer, steal my identity, my money, and my personal documents is fundamental AND potentially lucrative. Surely, I am not be the first to see this.

Which leads me to this broader question: Is there a conspiracy to deter the public from testing security software? If so, there can only be one answer to, "Why?"

Eat more fresh spinach.

[evilfantasy]

You found most of the test sites, and a few I haven't seen yet.

A few more.

• Test your firewall
  • McAfee Hacker Watch
  • GRC I Leak Test
  • Comodo Online Test
  • MISEC Trojan Simulator

Antimalware vendors are constantly updating, some more than others. Virus writers are constantly finding new ways to infiltrate users PCs. The balance constantly tilts.......The best security is you and I and how we surf and use the internet.

Which leads me to this broader question: Is there a conspiracy to deter the public from testing security software? If so, there can only be one answer to, "Why?"

You may want to check out this forum, it is where people from some of the bigger antivirus and antispyware vendors hang out and will answer your questions probably better then we can. http://www.wilderssecurity.com/

[brillobo]

Yes! Thanks, good info. I WILL try the forum you referenced.

You said, "The best security is you and I and how we surf and use the internet."

But what if I want to take my laptop to a bar, get buzzed and watch porn with piggybacked wifi and IE? ; P

OK, your point is well made and noted. If I go online unsheathed, so to speak, I better be ready to reformat with my handy-dandy nLite disk and Titan backup on my external HD....

[evilfantasy]

But what if I want to take my laptop to a bar, get buzzed and watch porn with piggybacked wifi and IE? ; P OK, your point is well made and noted. If I go online unsheathed, so to speak, I better be ready to reformat with my handy-dandy nLite disk and Titan backup on my external HD....

You could look into a free program like Sandboxie More info on Sandboxie HERE

There are ways to surf safe, it is just up to finding the method you are comfortable with. I don't use it but once you figure out Sandboxie you can surf with no worries at all.

[brillobo]

Yes, another good suggestion. Talk about a sheath! Virtual surfing.

I have had Sandboxie for some time and like it, but don't use it as often as I should (unsafe surfing?). I do find SB a little quirky, you have to hold your tongue just right to get it to work sometimes....

But it often updates and is improving, as is my understanding of how to use it.

However, I really want security software tests. SSTs. SSTs. Standup. Sitdown. Test. Test. Test.

[evilfantasy]

Wildersecurity should be able to help you out finding more tests (if there are any more)

I checked out the sandbox once and decided I liked it but just don't need it. Never really figured it out to be honest lol. It has updated quite a few times since then so I don't know what areas it may have changed in.

[brillobo]

@evilfantasy

Excellent responses from lotuseclat79 at TechSupportGuys, still waiting for Wildersecurity. 27 more leak tests, several ports tests and references to good white papers.

Best of all is the discussion of an entirely different solution to security at http://forums.techguy.org/general-se...are-tests.html.

This involves:
1. use Linux - eliminate AV, AS, AT, HIPS, etc, costs
2. use an iptables firewall
3. keep all ports stealthed
4. go online in a Live CD environment with 1GB RAM and no hard drives mounted
5. throw a command that spins down the HDs - further protecting them

Discussion is somewhat technical for me, but all the references are there. And, of course, switching to Linux (or using it on a different partition) is a big move.

This approach is new to me. Very interesting.

[serverguy]

Originally Posted by brillobo @evilfantasy Excellent responses from lotuseclat79 at TechSupportGuys, still waiting for Wildersecurity. 27 more leak tests, several ports tests and references to good white papers. Best of all is the discussion of an entirely different solution to security at http://forums.techguy.org/general-se...are-tests.html. This involves: 1. use Linux - eliminate AV, AS, AT, HIPS, etc, costs 2. use an iptables firewall 3. keep all ports stealthed 4. go online in a Live CD environment with 1GB RAM and no hard drives mounted 5. throw a command that spins down the HDs - further protecting them Discussion is somewhat technical for me, but all the references are there. And, of course, switching to Linux (or using it on a different partition) is a big move. This approach is new to me. Very interesting.

Linux is notoriously more secure - less people trying to hack it as it is open source. It is a good option if you can get used to it.

I have Sandboxie but I think it is just going over the top. If I need to visit somewhere to see if it downloads malware then I just use a virtual machine.

What sites are you visiting that requires all this security ??

The other thing you could do if you really want to test your security is find a hacker and ask them to try and hack your machine.. I use a similar procedure when I am developing web apps. I create something and then ask for it to be hacked like hell and they report on all the things they were able to do.

I don't know where you could go to get this service for a normal computer though.... And if they do hack you then you are screwed lol.

[evilfantasy]

Linux is a little too techie for me. I really don't want to build and maintain my OS, or do hours of RTFM.

Check this out, it has been in beta for a year or so and is stable. I have entertained the thought of trying it for quite some time but just haven't yet. I would like to hear from someone who has or does use it though. http://hautesecure.com/

still waiting for Wildersecurity.

Yea, an answer from there can take some time. Hopefully you will get one though. Might be like Tech Guy though and be a fairly involved answer.

Looks like lotuseclat79 linked you to WilderSecurity for answers also.