Spycar antimalware test

Just Playin · Mar 30, 2009

http://www.spycar.org/Spycar.html

What does Spycar do?
The following links are Spycar. Clicking on each of the links will make Spycar try to take some benign action on your system. When you first run it, Spycar will ask you to name a test profile, a small file where we’ll store state information about a given series of Spycar tests you perform. Then, when you click on each link, Spycar works by pushing a Windows executable to your browser. Currently, Spycar runs only on Windows, and its browser-centric alterations focus on IE, although it can be triggered by any Windows browser (Firefox-altering Spycar modules will be released soon!).

Spycar does not include any exploits, so you must click “OK” in the message that appears in your browser to run the given Spycar function. If, after you click “OK”, your anti-spyware tool blocks the given Spycar action, good for you! If not, this benign alteration will occur. Then, when you have clicked each of these links, you can click on the Results/Clean-Up link to have the Spycar tool called TowTruck automatically measure how your anti-spyware tool did, and to restore your machine to the pre-Spycar settings.

Note that we designed Spycar as a series of different links and associated executables. We did not make it a monolithic one-click-to-conduct-all-actions programs, because an anti-spyware tool may shut down a given program early on in its cycle, without letting Spycar accurately test later modules. That’s why you have to click on each link, giving your anti-spyware tool a fair shot at stopping each individual action.

Intelguardians cannot be held responsible if these files and/or your anti-spyware tool in combination with these files cause any damage to your computer. You download and run these files at your own risk. Download and run these files only if you are sufficiently knowledgeable in the usage of your anti-spyware tool and operating system. Intelguardians cannot and will not provide any help to remove these files or the changes they cause from your computer. Please contact the manufacturer of your anti-spyware tool to seek such help..
Click to expand...

TowTruck will measure whether Spycar was able to make the changes (in a benign form) often made by spyware tools. In your TowTruck output, you will see one of three items:

1.
• “Spycar change allowed” -- Sorry, but your anti-spyware tool did not block this test. You are not protected against this kind of behavior
2.
• “Spycar change blocked” -- Your anti-spyware tool blocked this test. That’s a good thing.
3.
• “Spycar test not performed” -- Either you did not run this element of Spycar, or your anti-spyware tool blocked it so thoroughly that Spycar cannot even determine that it was run. The former just means you need to do the test. The latter is a good thing.
Click to expand...

I'm using Avast! (with IE for the test) and I couldn't even run the last item (TowTruck.exe) until I temporarily disabled Avast!. It detected no sign that any of the tests I tried were even ran (Item#3), which is good.

LauraR · Mar 30, 2009

Just out of curiousity, I looked this up. The only thing I could find, besides from their own site, was this (stating it is malware):

http://www.spywareguide.com/spydet_3104_spycar.html

Category Description: Malevolent software that spreads itself automatically by infesting other files on your PC. Software which attaches to other software. A boot virus inserts its code into the boot record or master boot record of a disk, so that when the machine boots from that disk, the virus code is executed. A file virus inserts its code into an executable file, so that when that file is executed, the virus is executed as well. A macro virus attaches itself to documents like Word or Excel.
Official Description: From their website:
"Spycar is a suite of tools designed to mimic spyware-like behavior, but in a benign form. Intelguardians created Spycar so anyone could test the behavior-based defenses of an anti-spyware tool. Spycar runs only on Windows, the same platform most targeted by spyware developers."
Click to expand...

hrlow2 · Mar 30, 2009

Not much here either
http://www.sunbeltsecurity.com/ThreatDisplay.aspx?tid=101415&cs=31E39953F649786BA35D0BAD391E2169

LauraR · Mar 30, 2009

Thinking I'll err on the side of caution and not touch that link, considering the one site calls it malicious malware.

Kestrel13! · Mar 30, 2009

made to sound alot like Eicar ... (genuine ANTI-VIRUS OR ANTI-MALWARE TEST FILE)

Major Attitude · Apr 1, 2009

Removing my posts and apologizing. Im sure the intentions are good, just didnt think the publicity would help any. Have a good night.

Log in or Sign up

Spycar antimalware test

Just Playin MajorGeek

LauraR MajorGeeks Super-Duper Administrator Staff Member

hrlow2 MajorGeek

LauraR MajorGeeks Super-Duper Administrator Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Major Attitude Co-Owner MajorGeeks.Com Staff Member