Virus Total

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Has anyone here used the Virus Total site http://www.virustotal.com /
to scan a suspected file. Are they a trustworthy site?

Re: Virus Total

On 02/21/2009 12:43 AM, Caesar Romano sent:
Quoted text here. Click to load it

Hello Caesar:

In these malware newsgroups, we are *constantly* recommending them for
uploads.  They are currently using about 39 different scanners for their
evaluations.  Lately they've had little or no delay times.
Occasionally, a few of the scanners may report a false positive or not
show a hit at all.  However, with 39 scanners on the case, you can
always draw your own correct conclusion.

Give them a try...

HTH

Pete
--
1PW  @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]

Re: Virus Total


| Has anyone here used the Virus Total site http://www.virustotal.com /
| to scan a suspected file. Are they a trustworthy site?

100% trustworthy.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus Total

David H. Lipman wrote:
Quoted text here. Click to load it

Such a blanket endorsement
should be a red flag to any reasonable person.

Interesting how much of the essence of AV/VX/Spyware issues
are so embroiled in careless stupidity and blind faith.

Re: Virus Total


| David H. Lipman wrote:

Quoted text here. Click to load it


| Such a blanket endorsement
| should be a red flag to any reasonable person.

| Interesting how much of the essence of AV/VX/Spyware issues
| are so embroiled in careless stupidity and blind faith.

I'll tell Julio you said that.  :-)

So what is untrustworthy about Hispasec Sistemas ?
Or are you just playing the devil's advocate ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus Total

David H. Lipman wrote:
Quoted text here. Click to load it

Whoever Julio is, if he knows anything about the online vulnerability
business, probably would agree, and probably uses that fact as a key
aspect of whatever he's trying to accomplish.

Quoted text here. Click to load it

Better than trying to prove a negative, I'd flip the question and ask
what is trustworthy about those guys or anyone else for that matter?
The mere proclamation of someone being a security consultant isn't worth
much more than you pay for the bandwidth you need to read it.

Quoted text here. Click to load it

The devil needs no advocate,
for there so many willing to assist his efforts
by their insouciant nonchalance.

Re: Virus Total


| David H. Lipman wrote:

Quoted text here. Click to load it






| Whoever Julio is, if he knows anything about the online vulnerability
| business, probably would agree, and probably uses that fact as a key
| aspect of whatever he's trying to accomplish.

Quoted text here. Click to load it

| Better than trying to prove a negative, I'd flip the question and ask
| what is trustworthy about those guys or anyone else for that matter?
| The mere proclamation of someone being a security consultant isn't worth
| much more than you pay for the bandwidth you need to read it.

Quoted text here. Click to load it

| The devil needs no advocate,
| for there so many willing to assist his efforts
| by their insouciant nonchalance.

Simply put, Julio works for Hispasec Sistemas which is a well respected Spanish
security
organization that heads up VT.

VT is a server farm that performs on dmand scanning of submitted samples using
39 vendor
scanners.  The files submitted are provided to the participating vendors.  There
is no
introduced bias or modification to the resultant reports and Hispasec Sistemas
doesn't use
the collated samples for any nefarious purposes.  The system provides a key
service in
malware identification.

As for the comment "90% useful and 10% misleading crap.".  The statistics
provided are
made up numbers and opinionated.

While false positives and false negative decalartions are inevitable, VT is not
responsible for them.  That is a product of the participating vendors.

As for a "misleading" tag, that is only if you are unable to interpret the
findings or in
the rare case of multiple vendor false positive declarations or the possible
multiple
vendor false negative.

There is nothing that is untrustworthy about the VT service which is provided as
a public
service by Hispasec Sistemas.

Since they are vetted, it will be up to you and your critical thought and
investigation to
prove otherwise.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus Total

David H. Lipman wrote:
Quoted text here. Click to load it

Spoken like a true believer

Quoted text here. Click to load it

Vetted by whom and what criteria was used in the vetting process?

Too many unproven statements to render anything but voodoo creds,
IOW: it only works if you believe in it and sometimes not even then.

Re: Virus Total



ASCII wrote:
Quoted text here. Click to load it

Whyt are you being such an a-hole?
Did you get up on the argumentive side of the bed this morning?
Buffalo



Re: Virus Total

Buffalo wrote:
Quoted text here. Click to load it

So the best you can offer to a legitimate comment is an ad hominem?
You're a rather pathetic git and I'm hoping for your infection.

Re: Virus Total



ASCII wrote:
Quoted text here. Click to load it

You are not answering the OP's original post at all.
I guess you are just in an argumentive mode. I hope it isn't permanent or
contagious.
Here's to thinking about you while I am on the crapper.  :)



Re: Virus Total

Buffalo wrote:
Quoted text here. Click to load it

Commenting on an irrational reply to the OP is a legitimate response.

Quoted text here. Click to load it

Without the critical view I've taken, there would be a much higher
success rate for phishing techniques.

Quoted text here. Click to load it

Sounds like you need to spend more time there, whether you're merely
thinking about me or reevaluating your blind trust threshold.

Re: Virus Total


< snip >

| Sounds like you need to spend more time there, whether you're merely
| thinking about me or reevaluating your blind trust threshold.

The problem is you "assume" there is a blind trust associated with VT.  There
isn't.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus Total



ASCII wrote:
Quoted text here. Click to load it

OK, if you say so.  :)
Quoted text here. Click to load it

Your unabashed arrogance will not do you well in your future life.
(neither will your seemingly self-importance)

Quoted text here. Click to load it

You're right, it may take me more time to get rid or what's bothering me.
Buffalo



Re: Virus Total

Buffalo wrote:
Quoted text here. Click to load it

I'll forego the opportunity to exchange my deserved arrogance for some
drivel mouth dufus game as you seem to want to play.

Re: Virus Total



ASCII wrote:
Quoted text here. Click to load it

U should forgo more than that.
Drivel mouth dufus?  That's sounds really you.



Re: Virus Total

On 02/21/2009 03:25 PM, ASCII sent:
Quoted text here. Click to load it

Hello ASCII:

We wouldn't recommend VT if we didn't believe in it.  Some of us value
our reputations too.  We make up our own minds after we see the "votes"
of 39 separate analysis runs.

        <http://www.mywot.com/en/scorecard/www.virustotal.com

VT has steadily built its trust with us.  VT has done nothing to betray
that trust.  *You* still make the final decision after reading the results.

How do you build a good trust model any other way?

Regards.

Pete
--
1PW  @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]

Re: Virus Total

1PW wrote:
Quoted text here. Click to load it

Very courteous and succinct reply,
without all the hype, I might add.
Thanks
And yes I have to agree it's all a matter of acquired trust since I
doubt those spaniards are personal acquaintances of everyone
or even most in this forum.

Re: Virus Total

Quoted text here. Click to load it

Why don't I see Jotti.org recommended any more?



Re: Virus Total



| Why don't I see Jotti.org recommended any more?


That's a good question.  I, and the anti malware community, have great trust in
Jordi.
However I just think VT is better.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Site Timeline