Who is using this online scanner?

[polonus]

Hi malware fighters,

Anyone using this online malware file scanner: http://www.fortiguardcenter.com/antivirus/virus_scanner.html

polonus

[Lisandro]

No, not really, what would be the advantage compared to virustotal?

[scythe944]

No, not really, what would be the advantage compared to virustotal?

Yeah, really.  Virustotal uses fortinet as *one* of many detection programs anyway...

This is a list of the companies that participate in VirusTotal with their antivirus engines.

    * AhnLab (V3)
    * Aladdin (eSafe)
    * ALWIL (Avast! Antivirus)
    * Authentium (Command Antivirus)
    * AVG Technologies (AVG)
    * Avira (AntiVir)
    * Cat Computer Services (Quick Heal)
    * ClamAV (ClamAV)
    * Comodo (Comodo)
    * CA Inc. (Vet)
    * Doctor Web, Ltd. (DrWeb)
    * Emsi Software GmbH (a-squared)
    * Eset Software (ESET NOD32)
* Fortinet (Fortinet)
    * FRISK Software (F-Prot)
    * F-Secure (F-Secure)
    * G DATA Software (GData)
    * Hacksoft (The Hacker)
    * Hauri (ViRobot)
    * Ikarus Software (Ikarus)
    * INCA Internet (nProtect)
    * K7 Computing (K7AntiVirus)
    * Kaspersky Lab (AVP)
    * McAfee (VirusScan)
    * Microsoft (Malware Protection)
    * Norman (Norman Antivirus)
    * Panda Security (Panda Platinum)
    * PC Tools (PCTools)
    * Prevx (Prevx1)
    * Rising Antivirus (Rising)
    * Secure Computing (SecureWeb)
    * BitDefender GmbH (BitDefender)
    * Sophos (SAV)
    * Sunbelt Software (Antivirus)
    * Symantec (Norton Antivirus)
    * VirusBlokAda (VBA32)
    * Trend Micro (TrendMicro)
    * VirusBuster (VirusBuster)

[polonus]

Dear Tech and "scythe944",

The scanners bundled at virustotal aren't the real scanners, because for instance they lack heuristic finds, then for instance DrWeb general av scanner does not find certain malware that DrWebCureIt will find.

So the one tool is not the other tool, remember, not under all circumstances for all types of malware,
this just for the record....

pol

[Lisandro]

Ok, thanks Polonus.

[scythe944]

All that I can say is that I hope ALL A/V companies don't start making web scanners, otherwise we'll have a LOT more links to give to people to scan for FP's... lol

[.: L' arc :.]

-= Even though they VT doesn't use the real scanners, I guess its still worth having a scan with it..

[Lisandro]

-= Even though they VT doesn't use the real scanners, I guess its still worth having a scan with it..

What do you mean by not using the real scanners?

[scythe944]

The scanners bundled at virustotal aren't the real scanners, because for instance they lack heuristic finds, then for instance DrWeb general av scanner does not find certain malware that DrWebCureIt will find.

[Lisandro]

Hmmm... something is strange. I believe the engines must be the same. The antivirus company do not ship a special version of it to VirusTotal. Are we talking about different settings and different virus databases? I can't imagine a different engine running...

[scythe944]

Polonus?

[Lisandro]

Yeah... we'll wait for his input...

[polonus]

Hi scythe944 and Tech,

I have this information from a respectable virusinfo site, and I remember well they said there that all the engines worked on virustotal.com was without heuristic scanning. I also got the information from our user uniqueman here in the virus and worms that he brought home some infected computer and the normal DrWeb scanner did not flag it while the DrWeb CureIt, their on demand-scanner flagship did flag this malware (avast missed that one there, that is why he reported the issue). If I read these things at several places (4 or 5 times getting the same information) I will consider it as valid information, because virus detection is being manipulated by the advanced malcreants, so I could well imagine that av vendors have a varied response to versions of the same malware, that is also why the big av vendors have a larger open vulnerability window during a certain period after the virus was being detected, so "in the cloud" will be a new approach as was heuristic and behavioral scanning,

polonus

[DavidR]

I honestly can't see how this is the case (and we have talked about it before) as there are many files on VT that are detect as suspicious/heuristic, so I really can't see how this is possible if they don't run the heuristic element of an AV.

I haven't read the reviews, I just see the results of many VT scans in these forums and the links to the results, etc. so we are seeing anecdotal evidence that heuristic scanning appears to be running.

[scythe944]

I understand that your information may be true Polonus, but you also have to consider that the online virustotal.com might not have the most up-to-date definitions as well...

That could be the reason for stories such as this:

he brought home some infected computer and the normal DrWeb scanner did not flag it while the DrWeb CureIt, their on demand-scanner flagship did flag this malware