I’m looking for a way to emulate virus-like behaviour for testing exclusions in anti-virus software. Can anyone recommend some behaviour that I can put together in a quick script which would trigger a typical realtime anti-virus scanner?
I’m looking for a way to emulate virus-like behaviour for testing exclusions in anti-virus
Share
Most antivirus programs work on a signature database, not heuristic detection, so most of them won’t notice anything at all unless you write a program with the same signature as one that they’re looking for.
If you do have a heuristic-based detection program, just try some obvious virus behavior like modifying settings that control which programs launch at startup, checking processes for common antivirus program names, etc. You may be able to look up documentation for your specific program and find out exactly which heuristics it uses to try and detect viruses based on behavior. It’ll be pretty hard to find much of use by just firing off “a virus might do something like this” behaviors blindly.