Worm for Testing Purposes?

Hello\,

Does anyone know of a non-destructive, safe worm - one that doesn't do
anything but propagate and is easy to remove - that I can use for testing in
small networks?

Thanks!

Mike

No. Why not create one yourself instead of asking here. Nobody in their right mind
will do this for you

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
http://www.microsoft.com/protect

"dubya" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello\,
>
> Does anyone know of a non-destructive, safe worm - one that doesn't do anything
> but propagate and is easy to remove - that I can use for testing in small
> networks?
>
> Thanks!
>
> Mike
>

I didn't ask anyone to do anything, let alone create something.

You know, pal, most people in their right minds can read and actually do
read posts before replying.

"Peter Foldes" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> No. Why not create one yourself instead of asking here. Nobody in their
> right mind will do this for you
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
> http://www.microsoft.com/protect
>
> "dubya" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hello\,
>>
>> Does anyone know of a non-destructive, safe worm - one that doesn't do
>> anything but propagate and is easy to remove - that I can use for testing
>> in small networks?
>>
>> Thanks!
>>
>> Mike
>>
>

"dubya" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello\,
>
> Does anyone know of a non-destructive, safe worm - one that doesn't do
> anything but propagate and is easy to remove - that I can use for
> testing in small networks?

There's no such thing, but there are things that come close.

You probably need to find another way of accomplishing what you want,
but 'what you want' isn't exactly clear in your post

Are you intending to study the worm, or are you trying to test a
network?

dubya,

The EICAR group came up with a harmless file detected by antivirus products
so you can safely verify the product's working. If you haven't seen Windows
Defender detect something, visit
<http://www.eicar.org/anti_virus_test_file.htm> , download the 68 byte file
eicar.com.txt, and copy it to your startup folder. Your AV solution (that
you should be running in addition to Windows Defender) will also pick it up."
-=-

"dubya" wrote:

> Hello\,
>
> Does anyone know of a non-destructive, safe worm - one that doesn't do
> anything but propagate and is easy to remove - that I can use for testing in
> small networks?
>
> Thanks!
>
> Mike
>
>
> .
>

In news:0CC9B84E-1926-4EA2-AAA1-(E-Mail Removed),
??ç?l <(E-Mail Removed)> typed:
> dubya,
>
> The EICAR group came up with a harmless file detected by
> antivirus products so you can safely verify the product's
> working. If you haven't seen Windows Defender detect
> something, visit
> <http://www.eicar.org/anti_virus_test_file.htm> , download
> the 68 byte file eicar.com.txt, and copy it to your startup
> folder. Your AV solution (that you should be running in
> addition to Windows Defender) will also pick it up." -=-
>
> "dubya" wrote:
>
>> Hello\,
>>
>> Does anyone know of a non-destructive, safe worm - one
>> that doesn't do anything but propagate and is easy to
>> remove - that I can use for testing in small networks?
>>
>> Thanks!
>>
>> Mike
>>
>>
>> .

Good response: Eicar is completely safe and won't cause any harm. It's old
but it at least shows that the signature it uses gets caught by
security-ware.

HTH,

Twayne`

"Twayne" <(E-Mail Removed)> wrote in message
news:%23i4%(E-Mail Removed)...
> In news:0CC9B84E-1926-4EA2-AAA1-(E-Mail Removed),
> ??ç?l <(E-Mail Removed)> typed:
>> dubya,
>>
>> The EICAR group came up with a harmless file detected by
>> antivirus products so you can safely verify the product's
>> working. If you haven't seen Windows Defender detect
>> something, visit
>> <http://www.eicar.org/anti_virus_test_file.htm> , download
>> the 68 byte file eicar.com.txt, and copy it to your startup
>> folder. Your AV solution (that you should be running in
>> addition to Windows Defender) will also pick it up." -=-
>>
>> "dubya" wrote:
>>
>>> Hello\,
>>>
>>> Does anyone know of a non-destructive, safe worm - one
>>> that doesn't do anything but propagate and is easy to
>>> remove - that I can use for testing in small networks?
>>>
>>> Thanks!
>>>
>>> Mike
>>>
>>>
>>> .
>
> Good response: Eicar is completely safe and won't cause any harm. It's
> old but it at least shows that the signature it uses gets caught by
> security-ware.

It is not a worm, so how is that relevent to his query.

I am suspecting that the OP wants a *worm* (without a payload) to run
rampant on his network so that he can study worm behavior.

This is entirely unsafe - better would be to put restrictions on the
worm (such as requiring some registry value only found in the test
network's computers or requiring users' permission before replicating)
which violates the *other* request that the worm *only* propagte - and
do nothing else.

An impossibility.

....or just copy this

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

and paste it into notepad and save it as a batfile or comfile if your AV
doesn't alert on it when saved as a textfile.

....or see attached if it comes through.


"??ç?l" <(E-Mail Removed)> wrote in message
news:0CC9B84E-1926-4EA2-AAA1-(E-Mail Removed)...
> dubya,
>
> The EICAR group came up with a harmless file detected by antivirus
> products
> so you can safely verify the product's working. If you haven't seen
> Windows
> Defender detect something, visit
> <http://www.eicar.org/anti_virus_test_file.htm> , download the 68
> byte file
> eicar.com.txt, and copy it to your startup folder. Your AV solution
> (that
> you should be running in addition to Windows Defender) will also pick
> it up."
> -=-
>
> "dubya" wrote:
>
>> Hello\,
>>
>> Does anyone know of a non-destructive, safe worm - one that doesn't
>> do
>> anything but propagate and is easy to remove - that I can use for
>> testing in
>> small networks?
>>
>> Thanks!
>>
>> Mike
>>
>>
>> .
>>

"FromTheRafters" <erratic @nomail.afraid.org> wrote in message
news:%(E-Mail Removed)...
> "dubya" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hello\,
>>
>> Does anyone know of a non-destructive, safe worm - one that doesn't do
>> anything but propagate and is easy to remove - that I can use for testing
>> in small networks?
>
> There's no such thing, but there are things that come close.
>
> You probably need to find another way of accomplishing what you want, but
> 'what you want' isn't exactly clear in your post
>
> Are you intending to study the worm, or are you trying to test a network?
Sorry for the lack of clarity. Test the network. A mix of virtual machines
and hosts with various firewalls or lack thereof. I just want to see what
it gets through and what it doesn't. Nothing will be connected to any
public networks, so no risk to public bandwidth.

Thanks,
Mike

?ç?l,

Thanks. Indeed, that is a neat little item. I've used it. But it doesn't
attempt to travel from one machine to another on a network, which is what I
want to check.

Mike

"??ç?l" <(E-Mail Removed)> wrote in message
news:0CC9B84E-1926-4EA2-AAA1-(E-Mail Removed)...
> dubya,
>
> The EICAR group came up with a harmless file detected by antivirus
> products
> so you can safely verify the product's working. If you haven't seen
> Windows
> Defender detect something, visit
> <http://www.eicar.org/anti_virus_test_file.htm> , download the 68 byte
> file
> eicar.com.txt, and copy it to your startup folder. Your AV solution (that
> you should be running in addition to Windows Defender) will also pick it
> up."
> -=-
>
> "dubya" wrote:
>
>> Hello\,
>>
>> Does anyone know of a non-destructive, safe worm - one that doesn't do
>> anything but propagate and is easy to remove - that I can use for testing
>> in
>> small networks?
>>
>> Thanks!
>>
>> Mike
>>
>>
>> .
>>