VirusTotal - Free service to analyze new samples

This site is excellent.

Didier Stevens, a Security Colleague, Microsoft MVP Consumer Security and IT Security Professional has produced this YouTube video with instructions showing how to upload a file to VirusTotal.

The home page below provides information on how to submit a sample, plus the Top 10 viruses process in the past 24 hours

VirusTotal Home Site
http://www.virustotal.com/

About VirusTotal
https://www.virustotal.com/en/about/

VirusTotal FAQs
https://www.virustotal.com/en/faq/

Weekly and 24 hour statistics
https://www.virustotal.com/en/statistics/

Virustotal is a service developed by Hispasec Sistemas, independent IT Security laboratory, that makes use of several command line versions of antivirus engines, updated regulary with official signature files published by their respective developers.

The key services include:

* Free, independent service
* Usage of multiple antivirus engines
* Real time automatic update of virus signatures
* Detailed results of each antivirus
* Real time global statistics

This is the list of the companies taking part on this project with their antivirus engines in Virustotal.

Computer Associates (InoculateIT)
Eset Software (NOD32)
FRISK Software (F-Prot)
Kaspersky Lab (AVP)
Network Associates (McAfee VirusScan)
Norman (Norman Antivirus)
Panda Software (Panda Platinum)
Softwin (BitDefender)
Sybari (Antigen)
Symantec (Norton Antivirus)
Trend Micro (VScan)

I love this service. Excellent!!

I used it 4 times today already

Wow..awesome... I hope they have lots of bandwidth!!

Here is another similar site i learned about today.

Jotti's malware scan 2.24 - This site will allow you to submit a file and have it scanned by numerous virus scanners and display the results. The advantage to this site is that it uses the Norman Antivirus Sandbox feature to give you information about what the file does to your computer when it runs if Norman can not identify the type of virus it is.

This will come in handy. A lot better than sending it through yahoo or hotmail. :D Thanks!

Hi, this is Ziv Mador again from the Microsoft Anti-Malware team. This week, the folks over at VirusTotal added the Microsoft anti-malware engine to their service...[

http://blogs.technet.com/antimalware/archi.../28/426755.aspx

http://www.virustotal.com/en/indexf.html

Another one to add:

http://scanner.virus.org/

Welcome to the Virus.Org Malware scanning service, this service scans uploaded files with several common Anti-Virus tools to attempt to determine if the uploaded file is in fact some form of Malware.

The results of service is by no means a 100% proof positive that a file is in fact some form of Malware. Likewise if this service says a file is clean, it does not again provide a 100% proof positive that a file is not Malware. It could be that the file you have uploaded is in fact a virus that currently is undetected by the virus scanners that we use to provide the service.

Please do not ask for viruses that have been uploaded here. They are not for trade this is a legitimate service, not a Virus Trading site. Viruses uploaded here maybe be distributed to antivirus vendors. If you do not want your files to be distributed, please do not send them at all.

Virus definition are updated on an hourly basis, please refrain from uploading hex-edited or repacked variants of the same sample.

You can view the status of the scanners that are currently in use for the Virus.Org scanning service on the scanner info page. Here you will find information about the Scanner version, Scanner Engine version and Virus Signature version where available from the virus scanner.

You can also view the top 10 pieces of malware detected by each scanner all on one page here.

So basically we upload a file that we think is suspicious or if another program flags it as suspicious and this service scans it and give us a report?

(Sorry I have never actually used this/these services )

David

david28,

This, in my opinion, is a must-use free service. Just like you asked - you simply upload your file and you get a very fast answer on your suspicious file from 30+ anti-virus engines. If you haven't checked it out yet - I see the date on this post is may so maybe you've already been there and done that - if not check it out so you can see how it works.

tork

sry to bump up old topics.... just wanted to add another 2 similar sites

<-link removed>
and
http://novirusthanks.org

harrywaldron's original post shows various engines used vy VirusTotal. The post is few years old, the engine list is short
http://www.bleepingcomputer.com/forums/t/970/virustotal-free-service-to-analyze-new-samples/

Here's the list from yesterday (and yes, my submission is FP which a2 corrected today):
http://www.virustotal.com/analisis/4466f4c...11af-1257067405

This is one of the most useful free websites you can have. It scans a file with every AV program on the market and reports results. I use it whenever I have a file in question.

sry to bump up old topics.... just wanted to add another 2 similar sites

<-link removed>
and
http://novirusthanks.org

the no virus thanks scanner link is here: http://scanner2.novirusthanks.org/

Now Added SUPERANTISPYWARE!!!!!!!!!!!!!!!!!!!!!

Hello

There is VirusTotal Uploader who is very simple and practical, you can upload a file directly from your computer.

VirusTotal Uploader and tutorial

And VTzilla too who analize urls and/or websites ( only with Firefox )

VTzilla and tutorial

Regards,

Nico