Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus Scan Questions


  • Please log in to reply
1 reply to this topic

#1 Romath

Romath

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:08 PM

Posted 07 November 2009 - 02:25 PM

A webmaster I've been dealing with about an allegedly virus-laden file claims that many online malware scan sites are invalid for scanning Win XP/SP3 files because the sites use Linux versions of A-V engines; i.e., it's necessary to use a Windows-specific program for a valid scan. Two examples online that use 20 to 30 well-known and lesser-known A-V engines to scan files are http://virusscan.jotti.org/ and http://www.virustotal.com. Is there any truth to the webmaster's claim? Thanks.

Edited by Romath, 08 November 2009 - 02:20 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,766 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:08 PM

Posted 09 November 2009 - 11:24 AM

From Jotti's main page:

Jotti's malware scan is a free online service that enables you to scan suspicious files with several anti-virus programs. Scanners used are Linux versions; detection differences with Windows versions of the same scanners may occur due to implementation differences. There is a 15MB limit per file. Keep in mind that no security solution offers 100% protection, not even when it uses several anti-virus engines (for example, this scan service)...

Jotti Malware Scan

...Jotti’s malware scan is a free online service that enables you to scan suspicious files with several anti-virus programs. Scanners used are Linux versions; detection differences with Windows versions of the same scanners may occur due to implementation differences.

List of Online Malware Scanners

About VirusTotal

These and similar sites are essentially used to check for malware in a file you upload. Most of the major anti-virus vendors participate in VirusTotal, Jotti's, and UploadMalware.com with their antivirus engines. Malware uploaded to these sites is distributed to antivirus vendors. The samples can be analysed by automatic tools and security analysts to detect malicious code and to improve anti-virus engines.

From what I read, both the Linux and Windows scan engines have approximately the same capabilities but they scan for different malware patterns and there can be some differences in the results. Sites such as BC which help members with malware removal use both Jotti and VirusTotal and the majority of folks use Windows.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users