VirusTotal: On-demand antivirus service scans malicious files

I often want to run a file against multiple antivirus scanners, but installing several AV scanners on one system usually doesn't work. AV scanners are notorious for stepping all over each other. Each one wants to be the boss and doesn't like it when other AV scanners are present. Fortunately, the resources of more than 30 antivirus scanner engines are just a Web-click away. This free service is called VirusTotal.

For more information Use the command line to find malware on your Windows box.   Fight viruses with a fully-loaded USB flash drive.

VirusTotal allows a user to upload a file from his or her Web browser and submit it to 32 different antivirus engines for scanning. After a file is submitted to the scanning queue, when its turn comes up, the engines scan the file and show the results in real-time. A scanner that finds nothing turns up a circumspect "dash" next to that scanner's name. A scanner that thinks it has found something will report that the file is "suspicious." If a scanner thinks it has definitely found something, it will tell you the name of the virus it has detected. An infected file will seldom trip all the engines, but if six of them find something, it is usually a good bet that the file is corrupt.

VirusTotal soberly warns that it's not a substitute for client-based antivirus software, as it only scans individual files on-demand. It doesn't offer permanent or proactive protection for the system. And even though the detection rate of multiple antivirus engines is superior to that offered by any one product, don't get overconfident. Turning up nothing is no guarantee that a file is harmless -- but it might help to feel just a little less stressed.

About the author:
Scott Sidel is an ISSO with Lockheed Martin.

Rate this Tip To rate tips, you must be a member of SearchSecurity.com. Register now to start rating these tips. Log in if you are already a member. BROWSE BY TAG Scott Sidel's Downloads,   Malware, Viruses, Trojans and Spyware,   Information Security Threats,   Application and Platform Security,   Open Source Security Tools and Applications,   VIEW ALL TAGS Digg This!     StumbleUpon     Del.icio.us    RELATED CONTENT Scott Sidel's Downloads Use BotHunter for botnet detection Review system event logs with Splunk FISMA compliance made easier with OpenFISMA Ophcrack: Password cracking made easy Enigmail: Wrapping email in a digital security blanket Secure file copying with WinSCP FreeRADIUS: Acing a secure connection Spiceworks: Free network monitoring and management with a little zest Shining a spotlight on rootkits Closing the case on network firewall security with IPCop Malware, Viruses, Trojans and Spyware Major ISPs can remove botnets, malware, CISO says Zeus botnet temporarily disrupted, but back in full force Botnets, malware and capturing cybercriminals Botnets, malware and capturing cybercriminals Social networking threats put new pressure on healthcare CSOs Zeus Trojan continues reign infecting 74,000 PCs in global botnet Defending against RAM scraper malware in the enterprise Malware in Google attacks uses spaghetti code Preparing for future security threats, evolving malware Facebook attacks prompt investments in social networking security Open Source Security Tools and Applications Screencasts: On-screen demonstrations of security tools PuTTY configuration tips: How to connect to remote network systems Screencast: Find rogue wireless access points with Vistumbler H.D. Moore on future of Metasploit attack platform H.D. Moore speaks about Metasploit Project deal, Release 3.3 Screencast: How to launch an OpenVAS scan Could Metasploit popularity erode? Metasploit Project acquired by vulnerability management firm Rapid7 SSH key compromise shuts down Apache website Screencast: Smoothwall offers firewall defense in lean times RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary bot worm  (SearchSecurity.com) directory traversal  (SearchSecurity.com) government Trojan  (SearchSecurity.com) Kraken  (SearchSecurity.com) man in the browser  (SearchSecurity.com) polymorphic malware  (SearchSecurity.com) RAT (remote access Trojan)  (SearchSecurity.com) RavMonE virus  (SearchSecurity.com) Rock Phish  (SearchSecurity.com) Zeus Trojan (Zbot)  (SearchSecurity.com) RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.