On-demand cloud scanners that classify a given file/folder w/o uploading whole files

1. Norton Power Eraser - see Reputation Scan in Advanced Options. Classifies each file as "good," "bad," or "unknown." Norton Power Eraser can scan folders too but it gave "network" error message when I tried to scan a folder with too many files.

Any others?

 

HitmanPro with auto upload turned off under settings.

 

Thank you . I didn't know about that setting.

When scanning a folder, does HitmanPro still scan just the first-level subfolders of that folder?

 

I'd guess it scans all folders but it must have some kind of filter that filters out non suspicious files.

 

HitmanPro does not scan recursively.

 

Sigcheck.

Sigcheck respects VirusTotal API's limit of 4 checks per minute.

Here's the batch file I'm using to scan my downloads folder:

"C:\Program Files (x86)\Sysinternals Suite\sigcheck.exe" -s -vt -vrn "FolderToScan" > "OutputFile"

This checks the hash of every file in FolderToScan and subfolders without uploading any files, and also shows a VirusTotal report in a new browser tab for each non-zero detection.

Here's sample output from the above command (I changed the VirusTotal links from "https" to "hxxps"):

d:\download\Bitdefender 60-Second Virus Scanner.exe:

Verified: Signed
Signing date: 1:51 AM 1/7/2013
Publisher: Bitdefender SRL
Description: n/a
Product: n/a
Prod version: n/a
File version: n/a
MachineType: 32-bit
VT detection: 1/50
VT link: hxxps://www.virustotal.com/file/247924303b9f13135a9a1990dd0a610fc8931e26822d43631d3445398b3373be/analysis/
​

d:\download\BitDefender Active Virus Control.pdf:

Verified: Unsigned
File date: 4:42 PM 1/11/2014
Publisher: n/a
Description: n/a
Product: n/a
Prod version: n/a
File version: n/a
MachineType: n/a
VT detection: Unknown
VT link: n/a
​

d:\download\Bitdefender Antivirus Free Edition.exe:

Verified: Signed
Signing date: 3:58 AM 12/13/2012
Publisher: Bitdefender SRL
Description: n/a
Product: n/a
Prod version: n/a
File version: n/a
MachineType: 32-bit
VT detection: 0/49
VT link: hxxps://www.virustotal.com/file/05d720cc50883a707099bdcc4e9b212673d76105193191ab134833e129a92711/analysis/​

Awesome .

 

Thanks for responding .

 

Sigcheck 2.01 bug in -u when VirusTotal is used

 

VirusTotal Tools

 

VT Hash Check (single file only, I believe)

 

VirusTotal Scanner (single file only, I believe)

 

Supposedly fixed in Sigcheck 2.02.

 

VTUploaderZ

VirusTotal Uploader

 

MultiHasher

The site seems to imply that you need your own VirusTotal public API key, but the program already supplies one .

 

HashMyFiles

 

virustotalchecker

 

Bit9 FileAdvisor

 

Planning to do a comparative review and make 1 or 2 recommendations?

 

I haven't tried all of the above.

Here are my picks so far:

For checking a single file with VirusTotal, VT Hash Check is probably the best. You need to get a free VirusTotal public API key to use VT Hash Check though, so I won't use it, for now.

MultiHasher is my choice for checking files with VirusTotal, as long as there aren't too many files to check. Each file needs to be queried separately in the user interface. HashMyFiles comes in 2nd place IMHO for checking files with VirusTotal, as long as there aren't too many files to check. Note: MultiHasher suffers from the WOW Effect; HashMyFiles doesn't.

For automated checking of many files with VirusTotal, Sigcheck is the best IMHO.

Norton Power Eraser gives info about a file that VirusTotal doesn't, such as prevalence, so it's useful also.

Bit9 FileAdvisor has a limit for number of queries allowed per user per day (at least for free accounts).

Somewhat off-topic: I plan to use Phrozen VirusTotal Uploader to upload files to VirusTotal.

 

X-Ray

 

How to automatically scan every downloaded file in Firefox with VT Hash Check: https://www.wilderssecurity.com/showthread.php?t=333350.

 

TargetAnalyser

 

http://www.crystalsecurity.eu/

real time + ondemand with VT
there is a thread in this forum