When scanning a file that was downloaded from the internet if Virustotal reports 2 positives out of 50+ engines what is the next step to take before assuming the 2 positives were false positives?
Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
VirusTotal - Free service to analyze new samples
Started by
harrywaldron
, Jul 01 2004 10:44 AM
96 replies to this topic
#76
musicbits
-
- Members
- 63 posts
- OFFLINE
- Local time:01:23 PM
Back to top
#77
quietman7
-
- Global Moderator
- 65,743 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:04:23 PM
Posted 30 November 2016 - 12:23 PM
Contact the anti-virus vendors which detected the files and resubmit them to their labs so they can investigate.
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click 
#78
etiennehb
-
- Members
- 19 posts
- OFFLINE
- Local time:04:23 PM
#79
santiano
-
- Members
- 20 posts
- OFFLINE
- Local time:01:53 AM
Posted 06 November 2017 - 05:23 AM
Well.. Nice list of free service. Thanks for sharing this.
#80
santiano
-
- Members
- 20 posts
- OFFLINE
- Local time:01:53 AM
Posted 10 November 2017 - 12:59 AM
I am a newbie and join the forum recently, I am searching for 360 security antivirus. I am surfing forum to gain more knowledge about that. Sorry for reply late. Thanks for sharing.
#81
Didier Stevens
-
- BC Advisor
- 3,024 posts
- OFFLINE
- Gender:Not Telling
- Local time:09:23 PM
Posted 09 January 2018 - 01:36 PM
I have produced a YouTube video showing how to upload a file to VirusTotal:
I show what happens when your file has already been submitted to VirusTotal before, and what happens if it never has been.
Didier Stevens
http://blog.DidierStevens.com
SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2023
If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.
Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"
#82
trump_richard
-
- Members
- 7 posts
- OFFLINE
- Local time:01:53 AM
Posted 28 March 2018 - 12:22 AM
Awesome post...this is a must use service. Have already used it couple of times. Also i must add that it is very easy to use. Thanks a lot for sharing such a tool...
#83
quietman7
-
- Global Moderator
- 65,743 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:04:23 PM
Posted 28 March 2018 - 06:13 AM
You're welcome on behalf of the Bleeping Computer community.
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click
#84
SofiaBulatova
-
- Members
- 11 posts
- OFFLINE
- Gender:Male
- Location:New York
- Local time:08:23 PM
Posted 06 February 2019 - 03:53 PM
Very impressive. I will try to test it tomorrow and will writte down my opinion.
#85
Marou81
-
- Members
- 21 posts
- OFFLINE
- Local time:10:23 PM
Posted 28 March 2019 - 09:35 PM
Awesome post, the same exists for active processes, it's called process explorer, it detect all your active process and send them to virus total to see if there is a malware.
#86
Didier Stevens
-
- BC Advisor
- 3,024 posts
- OFFLINE
- Gender:Not Telling
- Local time:09:23 PM
Posted 31 March 2019 - 06:29 PM
Process Explorer does not send malware samples to VirusTotal automatically. You need to configure this. And you can also choose to just search for samples, without submitting them.
Didier Stevens
http://blog.DidierStevens.com
SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2023
If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.
Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"
#87
barrychapman
-
- Members
- 48 posts
- OFFLINE
- Local time:03:23 PM
Posted 24 June 2020 - 10:42 AM
sry to bump up old topics.... just wanted to add another 2 similar sites
<-link removed>
and
http://novirusthanks.org
viruschief.com takes me to some indonesian online casino.
I am not sure if this a compromised site/expired domain/or some sort of mental test; it should probably be removed from this list.
#88
quietman7
-
- Global Moderator
- 65,743 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:04:23 PM
Posted 24 June 2020 - 02:25 PM
I have removed the link.
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click
#89
sev7en2507
-
- Members
- 29 posts
- OFFLINE
- Gender:Male
- Local time:09:23 PM
Posted 30 September 2020 - 05:25 PM
#90
Erunosta
-
- Members
- 196 posts
- OFFLINE
- Gender:Male
- Local time:09:23 PM
Posted 15 January 2024 - 03:18 PM
Is anyone know what happened with VirusTotal?
Now when I try to check an URL then it swap to an ADD page to I have to login to virus total directly or trough other platform (like Google, Twitter, Microsoft) also it advertising new functions like adds.
This only happen with URL search. The virus upload function work as intended.
Edited by Erunosta, 15 January 2024 - 03:22 PM.
2 user(s) are reading this topic
0 members, 2 guests, 0 anonymous users
