PDA

View Full Version : A new Online Scanners


hzqedison
July 26th, 2007, 11:04 AM
VirSCAN.org is a FREE service for online scanning suspicious files using servral antivirus engines. And you can find the result and the degree of suspicious files.

VirSCAN.org can't in stead of the antivirus software in your computer, and we can't protect your system. We can only help you scan the suspicious files, but we are not responsible for the scan result from antivirus engines. If all of the engines cannot detect the file you uploaded as a malware, it can't say it isn't a new malware. Some engines detect the file you uploaded as a malware, but it can't say that it is, which may be false positive. Due to the platform and the engine version, the scan report can't show the actual ability of antivirus vendors. It is possible that we can't detect the suspicous file, but in fact the AV can detect it, or we can detect it, but the AV can't detect it. All of the above instances are normal and we are not responsible for that.

If the file you uploaded detected as suspicious, we will send the file and report to the antivirus vendors who provided engines for analyzing and they will update the signatures if it is a malware. If you disagree our clause or agreement, please don't use our service. We will not save the file you uploaded, so please don't contact us when you can't find your file. VirSCAN.org is organized by several fans of antvirus and it is a free website and it is not an opensource project. Our service is free and commonweal.We are neutral to the antivirus vendors. Our website is kindly supported by many antivirus fans and antivurus vendors.

Our commonweal:
1. Our service is free.
2.We provide users with multi-engines online scanners.
3.We provide suspicious files and report for antivirus vendors.
4.Antivirus vendors can help more users by update their antivirus signatures and software.
5.We are neutral to the antivirus vendors.

Notice: The suspicious files may be normal files, infected files, virus-damaged files, harmful programs and so on. Malware(Malicious softwares) are that virus, worm, trojan, spyware, adware, dailer, Joker, keylogger and so on.

virscan.org

I find it very good :thumb:
the forth FREE service for online scanner;D

FRug
July 26th, 2007, 04:35 PM
And who exactly is "we"?

Sorry to spoil the party but I´d rather not send malware to someone who is only known by a gmail address....

For all I know you could be just another VX kid jumping the online scanner bandwagon to get a hold on samples.....

Can any vendor confirm that you actually distribute samples like jotti or virustotal do?

Why should I trust you?

LUSHER
July 26th, 2007, 06:26 PM
Someone from China. Interesting reading.

I tried it, it seems to stall at the 16th engine mks_vir.

AMRX
July 26th, 2007, 07:09 PM
Yup! Stalls while scanning with mks_vis. But cool interface!

Inspector Clouseau
July 26th, 2007, 07:52 PM
Alone the fact that you are using such a old version of f-prot shows that you do not even care to have your scan engines up-2-date.

The results will be completely misleading and you will produce more work for the av vendors when people submitting things which are not detected with your "service" but detected with an actual version.

Next thing is who is behind this? I wouldn't submit files to someone who registers a domain with a anonymous gmail email and nobody heard something about him before.

The only advice i can give here is do it in a proper way or let it be!

Inspector Clouseau
July 26th, 2007, 08:06 PM
Interesting is also that you "spam" that even in hacker/malware writer boards. In case you don't know what i mean i help u a bit: www.unpackn.cn (URL is slightly modificated to avoid traffic to this site from here)

Chinese Website which produced several versions of patched armadillo and themida packers to avoid antivirus detection. That makes a good impression when u advertise your "service" there...

And by the way who gave u permission to include f-prot and to use our registered company logo?

Durad
July 26th, 2007, 08:30 PM
huh only 14 minutes left and Inspector have results already :thumb:

flyrfan111
July 26th, 2007, 08:39 PM
That's what you call on top of things!!

Brian N
July 26th, 2007, 09:00 PM
Poor guy.

flowerpig
July 26th, 2007, 10:05 PM
mks_vir have some problam. I close it now.

That website in beta, now.

flowerpig
July 26th, 2007, 10:06 PM
I sent a email to u, Please check mail. :D
{QUOTE-> Interesting is also that you "spam" that even in hacker/malware writer boards. In case you don't know what i mean i help u a bit: www.unpackn.cn (URL is slightly modificated to avoid traffic to this site from here)

Chinese Website which produced several versions of patched armadillo and themida packers to avoid antivirus detection. That makes a good impression when u advertise your "service" there...

And by the way who gave u permission to include f-prot and to use our registered company logo? <-QUOTE}

andylau
July 27th, 2007, 02:19 AM
{QUOTE-> Alone the fact that you are using such a old version of f-prot shows that you do not even care to have your scan engines up-2-date.

The results will be completely misleading and you will produce more work for the av vendors when people submitting things which are not detected with your "service" but detected with an actual version.

Next thing is who is behind this? I wouldn't submit files to someone who registers a domain with a anonymous gmail email and nobody heard something about him before.

The only advice i can give here is do it in a proper way or let it be! <-QUOTE}

Have you asked Jotti to change to a new Engine of ver 4.3?
Have you provided the last engine of ver4.3 for Linux? If yes, Jotti also use an old engine of F-Prot! If not, why you say VirSCAN uses an old engine?

Also, both VT , Jotti or virus.org has used some old engines, e.g. Kaspersky, Norman...etc.
Moreover, some online scanners in both VT or virus.org versions are virus database version, some are engine version

flyrfan111
July 27th, 2007, 03:56 AM
Jotti's uses the Linux version and it is the latest version. Version 6 has not been updated to work on Linux , that is currently being worked on.

andylau
July 27th, 2007, 04:12 AM
{QUOTE-> Jotti's uses the Linux version and it is the latest version. Version 6 has not been updated to work on Linux , that is currently being worked on. <-QUOTE}
how about VirSCAN?::)


That's what I want to say, Windows and Linux OS based, the av engine may not be the same. Why? Don't ask me, ask the AV vendors!

RejZoR
July 27th, 2007, 06:29 AM
Use VirusTotal if you want F-Prot v4 scan engine...

Marcos
July 27th, 2007, 08:22 AM
{QUOTE->
And by the way who gave u permission to include f-prot and to use our registered company logo? <-QUOTE}

Neither am I aware of anyone from Eset having given permission to use NOD32 for that purpose. Jotti and and Hispasec (VirusTotal) have asked us for a license and they got it, but without the vendor's consent you might be breaching EULA if you use your license for other than personal use.

flowerpig
July 27th, 2007, 08:36 AM
{QUOTE-> Neither am I aware of anyone from Eset having given permission to use NOD32 for that purpose. Jotti and and Hispasec (VirusTotal) have asked us for a license and they got it, but without the vendor's consent you might be breaching EULA if you use your license for other than personal use. <-QUOTE}

I cantact NOD32 China. And scanned samples post to China Nod32 now.

andylau
July 27th, 2007, 10:38 AM
{QUOTE-> And who exactly is "we"?

Sorry to spoil the party but I´d rather not send malware to someone who is only known by a gmail address....

For all I know you could be just another VX kid jumping the online scanner bandwagon to get a hold on samples.....

Can any vendor confirm that you actually distribute samples like jotti or virustotal do?

Why should I trust you? <-QUOTE}
After I read the About of that site.
The site has written as following:
If the file you uploaded detected as suspicious, we will send the file and report to the antivirus vendors who provided engines for analyzing

will not save the file you uploaded, so please don't contact us when you can't find your file.

I think "we" means the webmaster and the site "VirSCAN".
Or there has some translation mistakes by the translator. Because refer to the words used in flowerpig's reply, I don't think they are the same person.

If he has a website that in Chinese, I don't think you know Chinese,right?;D

19monty64
July 27th, 2007, 11:10 AM
{QUOTE-> mks_vir have some problam. I close it now.

That website in beta, now. <-QUOTE}
Sounds like "we" is "flowerpig"???

flowerpig
July 27th, 2007, 11:26 AM
{QUOTE-> Sounds like "we" is "flowerpig"??? <-QUOTE}
I make this website. Is VirSCAN's webmaster.
That website is services for all network users. Not for me only.

Now, the website in beta test. I hope get some support.

Thanks.

19monty64
July 27th, 2007, 11:33 AM
{QUOTE-> I make this website. <-QUOTE}
That is what I meant, and thanks for clarifying....

Durad
July 27th, 2007, 12:28 PM
Just tested it today.

Without going into judging if they are virus collectors or not they made a lot better web service than Virustotal and Jotti did.

RejZoR
July 27th, 2007, 04:01 PM
Hm, whats so better about it?

Durad
July 27th, 2007, 04:44 PM
I like that upload screen that show you upload progress, it pop-up logo of the scanner that is currently scanning and it is a lot faster than Virustotal at the moment.

I would add button that would copy test results to clipboard.

LUSHER
July 27th, 2007, 04:44 PM
The only thing nice i see that is not in virustotal is that it can scan compressed files password protected with infected or virus.

likuidkewl
July 27th, 2007, 05:55 PM
The reasons this is faster than VT, jotti, virus.org is user load ATM once the word is out this little baby is going to get crushed especially accepting password'ed archives.
It is another linux based scanner, btw.

Once thing I didn't like about the page is the way the results are displayed, if a file hangs like yesterday you have to close the whole tab/windows what a pita!

Other than that I would make sure you have the "license" to do such things ;)

RejZoR
July 27th, 2007, 07:08 PM
Sure it's faster. Just think how many "customers" are using VT and Jotti ever since the introduction. Thousands of users every day. This one just got to the scene. Just wait a bit and it won't be fast anymore...

Durad
July 27th, 2007, 07:29 PM
I said "at the moment" ;)

Rasheed187
August 4th, 2007, 02:49 PM
Looks nice, and let´s hope that not too many will discover this service so that it will stay this fast. ;D