SCOTT SIDEL'S DOWNLOADS
VirusTotal: On-demand antivirus service scans malicious files
Scott Sidel
09.21.2007
Rating: --- (out of 5)
|
Security can be stressful. It's a business that involves taking on someone else's stresses, wrestling them to the ground and neutralizing them. At the top of the list of stressors are suspicious files. Some of these virus-laden files are like kryptonite; they can really do a number on a system. Using one antivirus scanner can often discover malware, but maybe the virus writer was clever enough to evade detection.
I often want to run a file against multiple antivirus scanners, but installing several AV scanners on one system usually doesn't work. AV scanners are notorious for stepping all over each other. Each one wants to be the boss and doesn't like it when other AV scanners are present. Fortunately, the resources of more than 30 antivirus scanner engines are just a Web-click away. This free service is called VirusTotal.
VirusTotal allows a user to upload a file from his or her Web browser and submit it to 32 different antivirus engines for scanning. After a file is submitted to the scanning queue, when its turn comes up, the engines scan the file and show the results in real-time. A scanner that finds nothing turns up a circumspect "dash" next to that scanner's name. A scanner that thinks it has found something will report that the file is "suspicious." If a scanner thinks it has definitely found something, it will tell you the name of the virus it has detected. An infected file will seldom trip all the engines, but if six of them find something, it is usually a good bet that the file is corrupt.
VirusTotal soberly warns that it's not a substitute for client-based antivirus software, as it only scans individual files on-demand. It doesn't offer permanent or proactive protection for the system. And even though the detection rate of multiple antivirus engines is superior to that offered by any one product, don't get overconfident. Turning up nothing is no guarantee that a file is harmless -- but it might help to feel just a little less stressed.
About the author:
Scott Sidel is an ISSO with Lockheed Martin.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
 |
 |
| |
RELATED CONTENT
 |
Malware, Viruses, Trojans and Spyware |
|
Increase in Gumblar backdoors poses FTP credential problems
|
|
Hackers to sharpen malware, malicious software in 2010
|
|
iPhone worm Rickrolls jailbroken phones
|
|
Israeli Mossad add Trojan Horse to Syrian laptop
|
|
Schneier-Ranum Face-Off: Is antivirus dead?
|
|
Modern malware, stealthy botnets, adapt quickly, expert says
|
|
Computer worm infections up, scareware antivirus down, Microsoft says
|
|
Web-based attacks skyrocket, pirating sites surge, security firms say
|
|
Mini guide: How to remove and prevent Trojans, malware and spyware
|
|
Kaspersky system analyzes malicious URLs on Twitter for malware
|
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
