About VirusTotal
VirusTotal is a service that analyzes suspicious files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and web analysis toolbars.
VirusTotal's main characteristics are:
- Free, independent service.
- Runs multiple antivirus engines.
- Real time automatic updates of virus signatures.
- Detailed results from each antivirus engine.
- Runs multiple web site inspection toolbars.
- Real time global statistics.
You can find more information about this award in the original The 100 best products of 2007 article.
You can find more information about this award in the original 101 Fantastic Freebies article.
For more information or in order to make comments, suggestions or report bugs please contact us at .
Credits
VirusTotal is a service developed by Hispasec Sistemas, an independent IT Security laboratory, that uses several command line versions of antivirus engines, updated regularly with official signature files published by their respective developers.
This is a list of the companies that participate in VirusTotal with their antivirus engines.
- AhnLab (V3)
- Antiy Labs (Antiy-AVL)
- Aladdin (eSafe)
- ALWIL (Avast! Antivirus)
- Authentium (Command Antivirus)
- AVG Technologies (AVG)
- Avira (AntiVir)
- Cat Computer Services (Quick Heal)
- ClamAV (ClamAV)
- Comodo (Comodo)
- CA Inc. (Vet)
- Doctor Web, Ltd. (DrWeb)
- Emsi Software GmbH (Emsisoft)
- Eset Software (ESET NOD32)
- Fortinet (Fortinet)
- FRISK Software (F-Prot)
- F-Secure (F-Secure)
- G DATA Software (GData)
- Hacksoft (The Hacker)
- Hauri (ViRobot)
- Ikarus Software (Ikarus)
- INCA Internet (nProtect)
- K7 Computing (K7AntiVirus)
- Kaspersky Lab (AVP)
- McAfee (VirusScan)
- Microsoft (Malware Protection)
- Norman (Norman Antivirus)
- Panda Security (Panda Platinum)
- PC Tools (PCTools)
- Prevx (Prevx1)
- Rising Antivirus (Rising)
- Secure Computing (SecureWeb)
- BitDefender GmbH (BitDefender)
- Sophos (SAV)
- Sunbelt Software (Sunbelt antivirus)
- SUPERAntiSpyware (SUPERAntiSpyware)
- Symantec (Norton Antivirus)
- VirusBlokAda (VBA32)
- Trend Micro (TrendMicro, TrendMicro-HouseCall)
- VirusBuster (VirusBuster)
VirusTotal also makes use of a number of file characterization tools:
With respect to the URL analysis engines, these are the companies that should receive the credits:
- Microsoft (SmartScreen)
- Google (Google SafeBrowsing)
- Firefox (Firefox)
- Opera (Opera)
- TRUSTe (TRUSTe Site Reputation)
- OpenDNS (Phishtank)
- ParetoLogic (ParetoLogic URL Clearing House) more info
Warning
VirusTotal is not a substitute for any antivirus software installed in a PC, since it only scans individual files on demand. It does not offer permanent protection for users' systems either.
Although the detection rate achieved by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file.
Currently, there is no solution that offers 100% effectiveness in detecting viruses and malware. You may become a victim of deceitful advertising, if you buy such a product under those premises.
Why using VirusTotal for antivirus testing is a bad idea?
Hispasec is rather tired of repeating that VirusTotal was not designed as a tool to perform AV comparative analyses, but as a tool that checks suspicious samples with several AV programs and helps AV labs by forwarding them the malware they failed to detect. Those who use VirusTotal to perform AV comparative analyses should know that they are making many implicit errors in the methodology, the most obvious being:
- VirusTotal AV engines are commandline versions, so depending on the product, they will not behave exactly the same as the desktop versions: for instance, desktop solutions may use techniques based on behavioral analysis and count with personal firewalls that may decrease entry points and mitigate propagation, etc.
- In VirusTotal desktop-oriented solutions coexist with perimeter-oriented solutions; heuristics in this latter group may be more aggressive and paranoid, since the impact of false positives is less visible in the perimeter. It is simply not fair to compare both groups.
These are just two examples illustrating why using VirusTotal for antivirus testing is a bad idea, you can read more about this issue in our blog. The Prevx team also made an entry in its blog discussing the matter.
