Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Looking to build a lab to help students to combat the Sasser Virus? Does anyone know where I can get a copy of the virus?

share|improve this question
3  
If you need a test virus, go get a copy of Eicar, the industry standard test case for virus scanners. –  EEAA Nov 3 '10 at 4:16
    
I will never forget the day Sasser and Blaster hit. We shared our building with the Australian MS Tech Support team and they had trippled their on-call staff. –  Mark Henderson Nov 3 '10 at 5:26
1  
We don't combat viruses, when a machine becomes infected we nuke it from orbit. Trying to cleanup an infected machine is a recipe for missing part of it and having a recurrence or worse. –  Chris S Feb 22 '11 at 13:54
add comment

closed as off topic by jscott, Ben Pilbrow, Chris S, Scott Pack, Iain Feb 22 '11 at 15:21

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

The only people likely to have a copy of Sasser (without actually being infected by it) are researchers working for anti-virus program providers. You could approach them, identifying yourself as an educator, and you may get lucky.

Alternatively, you could construct your own honeypot, and see what kinds of malware you can attract for study. You would, of course, have to take proper and responsible precautions so that your infected honeypots don't infect or interfere with anyone else's computers. But that probably goes without saying.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.