Home > Security Tips > Scott Sidel's Downloads > VirusTotal: On-demand antivirus service scans malicious files
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

SCOTT SIDEL'S DOWNLOADS

VirusTotal: On-demand antivirus service scans malicious files


Scott Sidel
09.21.2007
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Security can be stressful. It's a business that involves taking on someone else's stresses, wrestling them to the ground and neutralizing them. At the top of the list of stressors are suspicious files. Some of these virus-laden files are like kryptonite; they can really do a number on a system. Using one antivirus scanner can often discover malware, but maybe the virus writer was clever enough to evade detection.

I often want to run a file against multiple antivirus scanners, but installing several AV scanners on one system usually doesn't work. AV scanners are notorious for stepping all over each other. Each one wants to be the boss and doesn't like it when other AV scanners are present. Fortunately, the resources of more than 30 antivirus scanner engines are just a Web-click away. This free service is called VirusTotal.

VirusTotal allows a user to upload a file from his or her Web browser and submit it to 32 different antivirus engines for scanning. After a file is submitted to the scanning queue, when its tur



n comes up, the engines scan the file and show the results in real-time. A scanner that finds nothing turns up a circumspect "dash" next to that scanner's name. A scanner that thinks it has found something will report that the file is "suspicious." If a scanner thinks it has definitely found something, it will tell you the name of the virus it has detected. An infected file will seldom trip all the engines, but if six of them find something, it is usually a good bet that the file is corrupt.

VirusTotal soberly warns that it's not a substitute for client-based antivirus software, as it only scans individual files on-demand. It doesn't offer permanent or proactive protection for the system. And even though the detection rate of multiple antivirus engines is superior to that offered by any one product, don't get overconfident. Turning up nothing is no guarantee that a file is harmless -- but it might help to feel just a little less stressed.

About the author:
Scott Sidel is an ISSO with Lockheed Martin.

Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Scott Sidel's Downloads,   Malware, Viruses, Trojans and Spyware,   Information Security Threats,   Open Source Security Tools and Applications,   Application and Platform Security,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Scott Sidel's Downloads
Use BotHunter for botnet detection
Review system event logs with Splunk
FISMA compliance made easier with OpenFISMA
Ophcrack: Password cracking made easy
Enigmail: Wrapping email in a digital security blanket
Secure file copying with WinSCP
FreeRADIUS: Acing a secure connection
Spiceworks: Free network monitoring and management with a little zest
Shining a spotlight on rootkits
Closing the case on network firewall security with IPCop

Malware, Viruses, Trojans and Spyware
How to defend against rogue DHCP server malware
New Trojan stealing FTP credentials, attacking FTP websites
Cybercriminals exploit Michael Jackson, Farrah Fawcett deaths
When BIOS updates become malware attacks
Antispyware buying guide for Indian enterprises
PCI compliance requirement 5: Antivirus
Hacker attack techniques and tactics: Understanding hacking strategies
Rootkit Hunter demo: Detect and remove Linux rootkits
Botnet threats and countermeasures
Conficker worm much smaller than feared

Open Source Security Tools and Applications
Screencast: Samurai offers pen-testing nirvana
Rootkit Hunter demo: Detect and remove Linux rootkits
When to use open source security tools over commercial products
Screencasts: On-screen demonstrations of today's IT tools
Maltego demo: Identifying a website's trust relationships
Free HP SWFScan tool detects Adobe Flash flaws
L0phtCrack returns
How to use (almost) free tools to find sensitive data
Should open source disk-encryption software be used?
Open source security concerns can trump cost savings

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
bot worm  (SearchSecurity.com)
directory traversal  (SearchSecurity.com)
government Trojan  (SearchSecurity.com)
Kraken  (SearchSecurity.com)
man in the browser  (SearchSecurity.com)
polymorphic malware  (SearchSecurity.com)
RavMonE virus  (SearchSecurity.com)
RFID virus  (SearchSecurity.com)
Rock Phish  (SearchSecurity.com)
Zotob  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts