PCMag article about a product using VT: http://securitywatch.pcmag.com/security-software/327316-do-you-trust-your-antivirus It mentions also this forum
Thanks, this is interesting. I didn't actually expect PC Mag to have a good article like this one. =V
Well said Mr Rubenking. This is good because all people doesn't read through Wilders or other security forums where this particular "product" have been discussed to death several times. Thanks IBK!
Well, the problem is Tiranium is being suspected to violate VT's ToS. Hence the investigation by Mr. Rubenking.
You can see a more or less orientation for others, too. For some it depends "who" detects the file and the a signature is simply created cause of others detection or this file is analysed with some priority. Common practice that vendors watch each other or scan with each other (often also in-house...) When I create f.e. a harmless file which isn't able to run but triggers a VT false detection from (only) Kaspersky all i have to do is to wait some time and rescan it on VT. It doesn't take long and Quihoo (Trojan.Generic is a name that is given for that) detects it, but also Tencent and Antiy-AVL are very quick (and they use even the detection name of the KL-FP).
You misunderstood the article. There are more AV vendors that use only detections from VT, not all really analyse samples (see Baidu for example). There's a human or an automated system that checks latest files so detections are often copied. It's currently done by almost all scanners available at VT. The difference is that their AV doesn't connect directly to VT and say 'clean' or 'malware' based only on the scan report. Tiranium connects to VT on their servers and detects the file if there are enough detections.
No no, i understood My example was because of your re-question @clocks who else utilizes VT. Sorry I don't understand utilize in a form that implicies direct connection. But the funny thing about the detection copying (what many do - for years) is that so many AVs detect useless crap and so many users believe that crap is malware...strange circle!
I thought it's just their own multi-engine scanning, are you sure it's VT? Crystal Security also uses VT, but it was allowed.
Darn right I do. First AV I ever did trusted fully to do what it claims at a high percentage level without petering out over time. Even if Qihoo backdoored my entire file inventory, they are very welcome to it because it's detections and captures certainly have far outweighed any potential privacy concerns I might have.
There's also some Android borderline malware that uses Virustotal to boost its false positive detection rate while then asking users to pay to have said detections removed. I can't remember the name of the one I stumbled on, but I assume there's tons of them around.
Quite the whackjob. Definitely don't want anything from such a guy running on my computer. Reminds me of Comodo
