Malware online scanners

Here is a list with online malware analysis services, updated as needed. Everytime you feel a file is suspicious or you receive a file from an untrusted source, it’s recommended to scan it with one of these online services before to open it. Please bear in mind that even a friend’s computer can be considered an untrusted source, since it can be malware infected and files sharing is a good chance for malware to spread.

The main advantage of these online scanners is that the submitted files will be scanned with many antivirus engines, reducing the chances for a virus to be unrecognized and therefore labeled as inoffensive — sometimes this is called multi-engine scanning. If an antivirus fail to detect an infected file, there are others that may recognize the infected code inside the file.

Here are also online services which provide detailed informations about the actions taken of a malware on the infected operating systems and services able to scan a given URL for possible threats.

Here you go :

VirusTotal http://www.virustotal.com/

Maximum file size: 20MB

Can be submitted suspicious files or URLs.

Jotti’s malware scan http://virusscan.jotti.org/en

Maximum file size: 20MB

Anubis http://anubis.iseclab.org/

Maximum file size: 8MB

This service provide a detailed report about the actions that an executable does on a operating system. In the case an URL is submitted, the report is about Internet Explorer process details when is visiting the submitted URL.

ThreatExpert http://www.threatexpert.com/filescan.aspx

Maximum file size: 5MB

Files scanner

VirSCAN http://virscan.org/

Maximum file size: 20MB

This scanning service supports Rar/Zip compressed files.

Joe Sandbox http://www.joesecurity.org/

Advanced analysis system providing detailed reports about submitted executables, PDF or DOC(Microsoft Word) files.

Sunbelt’s CWSandbox http://www.sunbeltsecurity.com/sandbox/

Maximum file size: 12288 KB

The results of the file analysis are sent to provided email adress.

Microsoft Security Portal https://www.microsoft.com/security/portal/Submission/Submit.aspx

Maximum file size: 10MB

The files can be submitted RAR or ZIP compressed.

Eureka Malware Analysis http://eureka.cyber-ta.org/

It’s an automated malware binary analysis service. For each uploaded binary, the Eureka service will attempt to unpack and disassemble the binary, and will produce an annotated callgraph, subroutine/data index page, strings summary, and list of embedded DNS entries.

JSUNPACK http://jsunpack.jeek.org/dec/go

It’s a generic JavaScript unpacker, can be submitted URLs, PDF, HTML or JavaScript files for analysis and malware detection.

Comodo Instant Malware Analysis http://camas.comodo.com/cgi-bin/submit

Very simple to use file scanner

Wepawet http://wepawet.iseclab.org/index.php

It’s a service for analyzing web-based malware therefore the file formats supported are Flash, JavaScript, and PDF files. Can be submitted both files or URLs.

F-SECURE SAMPLE ANALYSIS SYSTEM https://analysis.f-secure.com/portal/login.html

Can be submitted files or URLs for analysis. In order to obtain the scanning results, the registration is required.

FilterBit http://filterbit.com/index.cgi

Maximum file size: 20MB

Xandora http://www.xandora.net/upload/

Online binary analyzer, can be submitted either MD5 hash of a file, an IP or a Domain for analysis. Can be used Drag & Drop for files upload max size: 10MB and after analysis(15 to 30 minutes) the file MD5 hash will be used to search and see the report.

VirusChief http://viruschief.com/

novirusthanks Multi-Engine Antivirus Scanner http://vscan.novirusthanks.org/

Maximum file size: 20MB

Can be scanned a suspicious file or a Web adress .

URLVoid http://www.urlvoid.com/

It’s a service for scanning domains(websites) in order to identify possible exploits, malware and malicious threats

avast! Online scanner http://onlinescan.avast.com/

Maximum file size: 16MB

Kaspersky file online scanner http://www.kaspersky.com/virusscanner

Maximum file size: 1MB

System scanning services working via your browser(Active X plugin based). The majority of these services are provided by security vendors

Trojan Scanner http://www.windowsecurity.com/trojanscan/