View Full Version : Any online file scanner for large files > 20mb?
beethoven
August 29th, 2009, 11:35 PM
I believe Virustotal is limited to 20gb and Jotti perhaps a bit less - are there any online scanners for files larger than this?
acr1965
August 30th, 2009, 01:23 AM
How big ya talkin?
erikloman
August 30th, 2009, 02:48 AM
-{ Quote: "I believe Virustotal is limited to 20gb and Jotti perhaps a bit less - are there any online scanners for files larger than this?" }-
Limited to 20GB? I think you mean 20MB ;)
Hitman Pro 3.5 uses a Scan Cloud with 7 virusscanners. It uses LZMA compression before the file is being uploaded. If the compressed file is larger than 12MB then it is not uploaded to prevent long time connections to the cloud exhausting network resources.
How big of a file do you want to upload?
beethoven
August 30th, 2009, 03:04 AM
Sorry, of course I am talking mb :-[
as for the size I am interested right now - 21.7mb but it's more a matter of principle. I scan all downloaded files against Virustotal or jotti before installing but this does not work once you hit the limitations of these sites.
acr1965
August 30th, 2009, 03:50 AM
You may want to check on doing a copy/paste of the MD5 hash in a google search. If one of the online services scans a file that large there is a decent chance google may find it. What kind of file is it?
raven211
August 30th, 2009, 04:49 AM
-{ Quote: "Limited to 20GB? I think you mean 20MB ;)
Hitman Pro 3.5 uses a Scan Cloud with 7 virusscanners. It uses LZMA compression before the file is being uploaded. If the compressed file is larger than 12MB then it is not uploaded to prevent long time connections to the cloud exhausting network resources.
How big of a file do you want to upload?" }-
Well what if malware gets bigger than 12MB after compression? ;D :P
beethoven
August 30th, 2009, 05:34 AM
-{ Quote: "You may want to check on doing a copy/paste of the MD5 hash in a google search. If one of the online services scans a file that large there is a decent chance google may find it. What kind of file is it?" }-
Evernote installation file - 21.7 mb - how would I do the hash sum check?
Saraceno
August 30th, 2009, 05:44 AM
Not sure if there is a file limit, but you could try Dr Web's online file scan:
http://online.us.drweb.com/
simisg
August 30th, 2009, 06:40 AM
no malware more than 20mb......... maybe exist a rogue but not malware
acr1965
August 30th, 2009, 06:49 AM
See this link-
http://beeblebrox.org/hashtab/
Once you have that installed just right click the file and select properties and then file hashes. Copy the MD5 and paste it to a google search and see if anything pops up in the search result. Might be worth a shot.
I noticed that evernote.com did not list the MD5 next to the download.
Joeythedude
August 30th, 2009, 12:45 PM
There is a list of all security software someplace on the site , can't find a link to it now though.
Might have a few other online services.
There is a free piece of software called macirum or something like that, that scans a file , to see has it malware like characteristics. Its on that list.
I'd scan it locally with Hitman Pro , and avira. that should cover a lot .
MrBrian
August 31st, 2009, 07:27 PM
You could try Bit9 FileAdvisor Utility, and see if a hash of the file is in Bit9's database.
-{ Quote: "The FileAdvisor client utility is a lightweight (164 kb) shell extension to Windows File Explorer that enables you to right-click on any file on your computer and, with a single request, hash the file and submit it for analysis. " }-
-{ Quote: "
There is a free piece of software called macirum or something like that, that scans a file , to see has it malware like characteristics. Its on that list.
" }-
Perhaps you meant Mandiant Red Curtain.
BrendanK.
August 31st, 2009, 08:23 PM
As suggested before, a use of an md5 hash can be helpful. Knowing what to do with it, is much more ;)
What I do with large files is a) Scan them with the few scanners I have on my computer
b)Hash the file and search Google with it. Then if not on Google, I will check it using http://hash.cymru.com/.
c)See how reputable the publisher is.
PrevxHelp
September 1st, 2009, 01:07 AM
I haven't heard of any online scanning services which will scan that large of a file, but, is the file an installer? I'd somewhat doubt that there would be a single program of 20+MB (though I've been wrong in the past ;D) You may want to try extracting the file, either with WinRar if it is a standard archive format, or with other programs which can extract MSI archives/etc.
Alternatively, you may want to try installing it in a virtual machine using VMWare or VirtualPC and then copying over the installed files and submitting them individually.
Just my $0.02 :)
Saraceno
September 1st, 2009, 08:30 AM
You could also use universal extractor to break the installer file down.
Universal extractor - portable
http://www.portablefreeware.com/?id=641
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums