up vote 2 down vote favorite
share [g+] share [fb]

Looking to build a lab to help students to combat the Sasser Virus? Does anyone know where I can get a copy of the virus?

link|improve this question
3  
If you need a test virus, go get a copy of Eicar, the industry standard test case for virus scanners. – ErikA Nov 3 '10 at 4:16
I will never forget the day Sasser and Blaster hit. We shared our building with the Australian MS Tech Support team and they had trippled their on-call staff. – Mark Henderson♦ Nov 3 '10 at 5:26
We don't combat viruses, when a machine becomes infected we nuke it from orbit. Trying to cleanup an infected machine is a recipe for missing part of it and having a recurrence or worse. – Chris S♦ Feb 22 '11 at 13:54
feedback

closed as off topic by jscott, Ben Pilbrow, Chris S♦, Scott Pack, Iain♦ Feb 22 '11 at 15:21

Questions on Server Fault are expected to generally relate to servers, networking, or desktop infrastructure, within the scope defined in the faq.

1 Answer

up vote 0 down vote

The only people likely to have a copy of Sasser (without actually being infected by it) are researchers working for anti-virus program providers. You could approach them, identifying yourself as an educator, and you may get lucky.

Alternatively, you could construct your own honeypot, and see what kinds of malware you can attract for study. You would, of course, have to take proper and responsible precautions so that your infected honeypots don't infect or interfere with anyone else's computers. But that probably goes without saying.

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.