1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Free online Virus, Malware and URL scanner

Discussion in 'Computer Security' started by jk2447, Jan 18, 2011.

  1. jk2447

    jk2447 Petabyte Poster Moderator

    5,483
    354
    249
    Hi All,

    Bored in work so I thought I'd share this site with you. Upload a file and it will scan it with just about every AV on the market and tell you if any of them found a problem with it. Handy if you're creating packages or developing bespoke software and want to know how your estates AV will react. NOTE** Don't upload confidential files or anything with IP addresses in for your own piece of mind. You can test it with the eicar file for instance to demo it. If you're really bored create a text file and paste this into it, then delete the space at the end to test your clients AV :)

    X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

    Jim
     
    Certifications: BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, VCP4, CCA (XenApp6.5), MCSA 2012, VCP5, VCP6-NV
  2. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    Sorry, JK... I ain't clickin' a link to a site called Virus Total. :noway

    One of the best ways to avoid viruses is to avoid sites that are likely to get your PC virused. Infecting by file (which is what Virus Total purports to check for) is an ancient method.

    If, as you suggest, you're creating packages or bespoke apps, and you want to check to see how AV will handle it... why don't you just see how your AV will handle it? Plus, I don't know many people who create packages that are NOT confidential in nature. I seriously doubt most companies would trust uploading their app to some random site.

    Your heart is in the right place... but I'd recommend giving this a pass.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  3. jk2447

    jk2447 Petabyte Poster Moderator

    5,483
    354
    249
    Fair dues Michael. What you've said is totally fine my mate, but I'd imagine it is a legit site seeing as it was a McAfee trainer who told me about it.
     
    Certifications: BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, VCP4, CCA (XenApp6.5), MCSA 2012, VCP5, VCP6-NV
  4. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    I've had trainers tell me to use all sorts of things I shouldn't use. They're human, just like everyone else.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  5. Phil182

    Phil182 Nibble Poster

    50
    8
    22
    Totally agree with Michael on this, anything we don't test internally the pen testers will. Repped.
     
    Last edited: Jan 18, 2011
    Certifications: MCDST, MCP 70-271, NVQ IT Practitioner
    WIP: MCTS: SQL Server 2008
  6. dazza786

    dazza786 Megabyte Poster

    758
    30
    67
    Cheers, Jim :biggrin
     
    Certifications: MCP (271, 272, 270, 290, 291, 621, 681, 685), MCDST, MCTS, MCITP, MCSA, Security+, CCA(XA6.5)
  7. jk2447

    jk2447 Petabyte Poster Moderator

    5,483
    354
    249
    Yeah fair enough guys but my thinking was if you have a file and your AV doesn't think its infected, you could try that site which gets almost all AV products to look at it. Probably not for business use yeah and I agree trainers are only human.
     
    Certifications: BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, VCP4, CCA (XenApp6.5), MCSA 2012, VCP5, VCP6-NV
  8. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    So we should do that for EVERY file that our AV doesn't think is infected? :blink

    There's another reason why I don't support sites like these: virus creators use them to see whether the viruses they create will be caught by the leading AV products out there. If you disbelieve, Google it up, my good friend! :biggrin

    I'm sure VT believe they're providing a good service. But they could be causing more harm than good.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  9. jk2447

    jk2447 Petabyte Poster Moderator

    5,483
    354
    249
    No no of course not, but if theres a file, or exe or anything you want to prove has or hasn't got an infection, you might try this. An example would be an excel doc you believe your AV is picking up as a false positive perhaps, and you'd like to know what another suppliers AV software would think of it.
     
    Certifications: BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, VCP4, CCA (XenApp6.5), MCSA 2012, VCP5, VCP6-NV
  10. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    True, so it does have some use. Still, would you trust the file, even if other AV software says it's OK? I'd still be wary... but then again, I'm probably overcautious.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  11. jk2447

    jk2447 Petabyte Poster Moderator

    5,483
    354
    249
    I suppose I would if it had the once over from multiple AV products but then again there's nothing wrong with being overcautious or going with your gut feeling about something. I agree, especially in this day and age.
     
    Certifications: BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, VCP4, CCA (XenApp6.5), MCSA 2012, VCP5, VCP6-NV

Share This Page

Loading...