Blog VirusTotal

look at this one:
www.imenantivirus.com
very very very good!

You should add ArcaVir, WebWasher, A-Squared and SUPERAntiSpyware (the latter hasn´t a command line scanner yet).

Yes, a-squared would be nice!

You know I'm thinking, how many more antiviruses do we really need to add. The more we add the more the service slows down. Im not saying this is a bad idea to add alot of v scanners, but when do we say thats enough.

Who knows...

Good point re: how many antivirus scanners to use. It certainly helps to have several. A recent trend in malware is to make it short lasting and regional/local in nature, so a variety of scanners is needed. VirusTotal also passes on malware found to its participant scanners, so it is playing an important part in detection. This especially helps some of the smaller companies that don't have 24/7, world wide antivirus laboratories.

Regards,

Don't add more scanners. They are already to much.

The service will crash under it'w own weight otherwise!

My points are:
- Virustotal is acting like a honeypot for the small vendors.
- One of the recent trends in malware is to keep it under the radar of AV companies (low numbers of identical samples, regional/targeted/custom malware, repacked stuff, peer to peer botnets, etc)
- We need scanners with different technologies (antivirus, antispyware, whitelist, blacklist, heuristics, packers detection, etc) and thresholds of detection (gateway vs desktop scanners).

So, VT should get additional funds to cope with the increased load of more scanners.

Hope it was clear.

That's very clear, and we both seem to agree. I don't know how VT is funded--looks like it is mostly from Hispasec. Perhaps the AV companies could help out (maybe they already do). Putting a scanner on VT is like free advertising. At any rate, VT is certainly becoming more important. You know, they might be in a position to "grade" AV software--such as providing a report on viruses found by specific software, but that would take money.

Regards,

It's good to have AhnLab as it's one of biggest Asian AV beside TrendMicro.

VirusTotal should also add TrendMicro.

imenantivirus, ArcaVir, WebWasher, A-Squared and SUPERAntiSpyware are not really AV, they are actually using one of other scan engine such as Sophos, kaspersky, many more.

To qualify for VirusTotal, AV vendor must have their own core scan technology.

cho em nha

Trend Micro refuses to participate or so I was told.

- Webwasher adds a custom engine to Antivir (it´s an aggressive scanner like Fortinet and eSafe for instance)
- ArcaVir is the AV from mks_vir (Poland company). Check its detection rate at AV-Comparatives.org.
- A-Squared is developed by EMSI Software. Usually, it has some FPs.
- SUPERAntiSpyware is one of the best (if not the best) at detecting the lastest threats (blended malware, rootkits, trojan clickers, etc). It has high praise between malware collectors. Excluding forensic tools (integrity checkers, antirootkits, etc) it is the only one able to detect and remove loaded Rustock (the stealthiest malware known until now). Unfortunately, it lacks a CLI scanner and I guess that some scanning technologies can´t be used at Virustotal.

If AV vendors must have their own core scan technology, F-Secure (KAV + Norman Sandbox + some F-Prot signatures + custom technology) and Authentium (F-Prot clone) wouldn´t have place here.

ahnlab is the worst antivirus software

AhnLab is the biggist security & anti-virus company in Asia. I think AhnLab is a very good software company.

i was reading a artical about virisutotal, this is great tool to scan affected files.

http://www.computerfreetips.com/pc_Troubleshooting/detect_viruses.html

Thanks

I'd mention the command-line version of the free a-squad anti-malware. After a short research it turns out that a-squared is just the only company who offers a command prompt based tool. F-prot ceased support to its DOS-compatible version of antivirus, DrWeb and Vexira offer command-line scanners on commercial basis only. Other vendors seem to include this nice feature in enterprise products, which cannot be free by their nature.
To me, it's one more reason to give thumbs up to a-squared.