And Now... Spycar
What does Spycar do?
The following links are Spycar.  Clicking on each of the links will make Spycar try to take some benign action on your system.  When you first run it, Spycar will ask you to name a test profile, a small file where we’ll store state information about a given series of Spycar tests you perform.  Then, when you click on each link, Spycar works by pushing a Windows executable to your browser.  Currently, Spycar runs only on Windows, and its browser-centric alterations focus on IE, although it can be triggered by any Windows browser (Firefox-altering Spycar modules will be released soon!).  
 
Spycar does not include any exploits, so you must click “OK” in the message that appears in your browser to run the given Spycar function.  If, after you click “OK”, your anti-spyware tool blocks the given Spycar action, good for you!  If not, this benign alteration will occur.  Then, when you have clicked each of these links, you can click on the Results/Clean-Up link to have the Spycar tool called TowTruck automatically measure how your anti-spyware tool did, and to restore your machine to the pre-Spycar settings.
 
Note that we designed Spycar as a series of different links and associated executables.  We did not make it a monolithic one-click-to-conduct-all-actions programs, because an anti-spyware tool may shut down a given program early on in its cycle, without letting Spycar accurately test later modules.  That’s why you have to click on each link, giving your anti-spyware tool a fair shot at stopping each individual action.
 
Intelguardians cannot be held responsible if these files and/or your anti-spyware tool in combination with these files cause any damage to your computer. You download and run these files at your own risk. Download and run these files only if you are sufficiently knowledgeable in the usage of your anti-spyware tool and operating system.  Intelguardians cannot and will not provide any help to remove these files or the changes they cause from your computer.  Please contact the manufacturer of your anti-spyware tool to seek such help.
Autostart Tests
 
Click here make Spycar try to drop a file and install a Registry key to execute it under HKLM\Software\Microsoft\Windows\CurrentVersion\Run
 
Click here to make Spycar try to drop a file and install a Registry key to execute it under HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
 
Click here to make Spycar try to drop a file and install a Registry key to execute it under HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Click here to make Spycar try to drop a file and install a Registry key to execute it under HKCU\Software\Microsoft\Windows\CurrentVersion\Run
 
Click here to make Spycar try to drop a file and install a Registry key to execute it under HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
 
Click here to make Spycar try to drop a file and install a Registry key to execute it under HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Internet Explorer Config Change Tests
 
Click here to make Spycar try to change your default home page in IE
 
Click here to make Spycar try to lockout users from changing the default home page in IE
 
Click here to make Spycar try to change your default search page in IE
 
Click here to make Spycar try to remove the Advanced Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the Programs Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the Connections Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the Content Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the Privacy Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the Security Tab in your IE Internet Options Screen
 
Click here to make Spycar try to remove the General Tab in your IE Internet Options Screen
 
Network Config Change Tests
 
Click here to make Spycar try to add an entry to your hosts file (typically c:\windows\system32\drivers\etc\hosts)
 
RESULTS AND CLEAN-UP
Click here to run TowTruck 1.0 to see how well your anti-spyware tool defended you, and to clean up all Spycar alterations.
 
TowTruck will measure whether Spycar was able to make the changes (in a benign form) often made by spyware tools.  In your TowTruck output, you will see one of three items:
 
  1. • “Spycar change allowed” -- Sorry, but your anti-spyware tool did not block this test.  You are not protected against this kind of behavior
  2. • “Spycar change blocked” -- Your anti-spyware tool blocked this test.  That’s a good thing.
  3. • “Spycar test not performed” -- Either you did not run this element of Spycar, or your anti-spyware tool blocked it so thoroughly that Spycar cannot even determine that it was run.  The former just means you need to do the test.  The latter is a good thing.
 
Come Back Often
New Spycar modules testing other anti-spyware functionality will be released on a periodic basis.  Please come back and look for new anti-spyware tests.  Also, keep in mind, when new modules are released, you’ll have to use the latest TowTruck program to clean up the changes.  The latest new modules will be listed above in a yellow font to distinguish them from the earlier set (because this is the original Spycar release, no “New” modules appear above in yellow yet).