Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 7th, 2008, 6:02am
   Mischel Internet Security Forum
   Other Products
   Trojan Simulator (Moderators: Helena, Gavin_Coe, Magnus)
   Trojan Simulator 1.0 Released!		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Trojan Simulator 1.0 Released!  (Read 4390 times)
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4106
Trojan Simulator 1.0 Released!
« on: Jan 1st, 2003, 9:42pm »		 Quote Quote  Modify Modify
For years you have been able to test your virus scanner with the harmless "Eicar" test file. Using the just released "Trojan Simulator" you can now test your security software in the same manner, using a harmless demonstration trojan. This is a risk-free way to see how your security products behave in a real-world situation.
 
Web page:  
http://www.misec.net/trojansimulator
 
Download:  
http://www.misec.net/products/TrojanSimulator.zip
 
Installation is simple: Simply unzip all files contained in TrojanSimulator.zip to any directory. To start, double-click TrojanSimulator.exe. A comprehensive Readme file is included, explaining how Trojan Simulator works. The online version of the readme file is available at the Trojan Simulator web page, http://www.misec.net/trojansimulator
IP Logged
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2039
Re: Trojan Simulator 1.0 Released!
« Reply #1 on: Jan 2nd, 2003, 12:47am »		 Quote Quote  Modify Modify
Reported to Global Affairs
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
dynamodave
Full Member
***



I love YaBB 1 Gold!

  hrlyrider48080  
Email

Posts: 148
Re: Trojan Simulator 1.0 Released!
« Reply #2 on: Jan 2nd, 2003, 1:16am »		 Quote Quote  Modify Modify
trojanhunter gaurd worked fine then I shut it off and tried the simulator trojan again..  
I use a nice utility called startup monitor http://www.mlin.net/StartupMonitor.shtml that caught  the simulator trojan trying to add it self to the startup entry register.. does this simulator trojan also try to hook up to a port like leaktest and should zonealarm also have detected this simulator trojan..  nice work as always magnus
IP Logged
marti
Senior Member
****






   


Gender: female
 Posts: 399
Re: Trojan Simulator 1.0 Released!
« Reply #3 on: Jan 2nd, 2003, 3:19am »		 Quote Quote  Modify Modify
A couple of my buddies at the PC Q&A forum have had strange experiences with the simulator.  I asked them to report here, but in case they don't, here's the thread:
 
http://www.pcqanda.com/dcforum/computer/53125.html
« Last Edit: Jan 2nd, 2003, 3:22am by marti » IP Logged
DC
Veteran
*****



I love YaBB 1G - SP1!

   


Posts: 567
Re: Trojan Simulator 1.0 Released!
« Reply #4 on: Jan 2nd, 2003, 9:56am »		 Quote Quote  Modify Modify
Tried scanning simulater with Norton 2003, found nothing. Scanned with TH detected it immediately. Had to delete the squashed bug and reinstall simulater to uninstall. Opened it again and before I could hit the ok button to install to my files TH squashed it. Did it several times, lot's of fun squashing bugs. Thanks Magnus.
IP Logged
spy1
Full Member
***



I love YaBB 1 Gold!

   
Email

Gender: male
 Posts: 227
Re: Trojan Simulator 1.0 Released!
« Reply #5 on: Jan 2nd, 2003, 4:33pm »		 Quote Quote  Modify Modify
Magnus - The "keystroke logger" idea you put forth on the DSL has merit - if not that, then at a bare minimum, the "Trojan Simulator" should actually exhibit behavior/contain code instructions that only a trojan would have.
 
As is, it does not hook the winsock, keyboard or system - something I think you'll agree most any trojan does do.
 
It makes "Simulator" rather useless as any kind of a test at all due to the fact that any kind of a program that you install is going to make the same kind of changes that "Simulator" does (which is why they don't get "alerted on" either - with good reason).
 
I'm also looking rather askance at the fact that you provided a def update for "Simulator" prior to releasing it - someone looking at that through the wrong end of the binoculars could view that as your attempt at "oneupsmanship" ("My detector finds it and yours doesn't!") - not to mention the fact that you managed to confuse a lot of both people who use your trojan detector or someone else's with the "test" and its' results - and that you've now caused coding time for all the other AT software makers for something that doesn't reflect any 'real-world' threat regarding trojan-detection.
 
I'd've felt a lot better about the whole thing if you'd actually come up with some new kind of method and had tested with that instead - and I hope you do produce something worthwhile along this line sometime in the future. Pete
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4106
Re: Trojan Simulator 1.0 Released!
« Reply #6 on: Jan 2nd, 2003, 7:12pm »		 Quote Quote  Modify Modify
Trojan Simulator was released because there was, up until yesterday, no way to test your trojan scanner and other security software. There was a need for a harmless demo program that behaves like a trojan and can be used to verify that your security software works. I think it fulfills its purpose quite well. Granted, it could have had more bells and whistles, but I wanted to keep the features of the first release to a minimum.  
 
As for TrojanHunter detecting it when it was released: Trojan Simulator wasn't meant to be something that has to be added in record time to signature files. Its purpose is for users to be able to verify that their security software is working and to be able to simulate a trojan infection without having to download an actual trojan.  
 
Adding detection rules for Trojan Simulator in TrojanHunter took about 30 seconds. A complete analysis of the way the program works is available in the readme file. It shouldn't really be a drain of resources on any developer - I'm guessing it takes no more than a few minutes for most.
« Last Edit: Jan 2nd, 2003, 7:13pm by Magnus » IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4106
Re: Trojan Simulator 1.0 Released!
« Reply #7 on: Jan 2nd, 2003, 7:23pm »		 Quote Quote  Modify Modify
on Jan 2nd, 2003, 3:19am, marti wrote:
A couple of my buddies at the PC Q&A forum have had strange experiences with the simulator.  I asked them to report here, but in case they don't, here's the thread:
 
http://www.pcqanda.com/dcforum/computer/53125.html

 
marti,
 
Trojan Simulator doesn't really do anything that could cause the described behavior. I'm thinking that maybe the Startup Monitor software he's using caused the problems after it intercepted the registry entry Trojan Simulator adds. If there had been some major problem on Windows 98, others would probably have reported it by now, so it's hard to say what caused the lock-up in this case.
IP Logged
marti
Senior Member
****






   


Gender: female
 Posts: 399
Re: Trojan Simulator 1.0 Released!
« Reply #8 on: Jan 2nd, 2003, 10:11pm »		 Quote Quote  Modify Modify
Thanks Magnus.  I didn't have problems with my Win98SE machine.
IP Logged
Linda
Newbie
*





   


Gender: female
 Posts: 36
Re: Trojan Simulator 1.0 Released!
« Reply #9 on: Dec 27th, 2003, 8:10pm »		 Quote Quote  Modify Modify
Tested it on xp home. TH caught it right away, and nav 2003 didn't see anything.
IP Logged
SteeLRasH
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 2
Re: Trojan Simulator 1.0 Released!
« Reply #10 on: Jan 23rd, 2004, 1:06pm »		 Quote Quote  Modify Modify
hi!
i used trojan simulater and it uses only run key to be started up. i think next version must include more startup ways like activex or nt shell vs..  so new users can learn how a trojan can be removed manually
 
thx
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register