Next to VirusTotal and Jotti now there is the Filterbit Online Scanner!

Hi malware fighters,

There is a new online scanner that uses a bundle of 9 online av-scanners, and allows the upload of 20 MB files, what is well over what Jotti or Virscan allow (max. 10 MB). The number of scanners used is a bit lower for Filterbit as with Virustotal, that has 38, Virscan, that has 37 and Jotti, that has 20, but Filterbit is still in beta. These bundled scanners on these kind of sites form handy tools for users to check their suspicious files against or those that want a “second opinion” on a file that has been flagged by one or more anti-malware scanner(s) to find out if this could be a genuine find or this could be a possible False Positive.

Here there is the survey of these online scanners:
http://www.virustotal.com/
http://virusscan.jotti.org/
http://virscan.org/

and finally for you anti malware fighters the link to the new kid on the block:
http://www.filterbit.com/

Also read:
http://www.raymond.cc/blog/archives/2008/05/28/battle-of-the-6-online-malware-file-scanners/
enjoy,

polonus

Good comparison test, including file size, speed of upload (although I think the newer ones have less server usage…), accuracy, number of scanners. There are room from improvement, VirusTotal still ahead from the others.

Well the review is almost a year old as it is indicating 28 May (though it doesn’t give a year, likely 2008 given some of the image captures) and a week in AV terms is a long time a year, is ancient history.

VirusTotal is reported as having 32 scanners, currently that is 39 and was 40 not to long ago. There are also some more inaccuracies, file upload size is incorrect.

I also don’t see how you can directly compare them if they use different scanner engines, etc.

There’s definitely room for improvement at Filterbit. Here are the result pages for a known malware mplayerplugin.dll:

Filterbit 0/9

VirusTotal 21/40

VirScan 15/37

Jotti 7/20 (no link)

Thank you, Jahn, for testing,

Yes, it is still in beta, the novelty about it is the meta scanner, like a-squared now is driven by Ikarus, is the speed with which the scanning is being performed and the larger upload allowed.
I mainly have experience with VirusTotal because this is most advised here in the virus and worms, but it is good that we know what these scanners are capable or in this case incapable of. Again, thanks for reporting, in this way the information on avast web forums is getting more and more valuable,

polonus (malware fighter)

don’t forget about http://scanner.novirusthanks.org/
which is also online multi-scanner

Hi Dwarden,

Thanks for reporting. We will add it. I like to ask the malware fighters here what scanner is their favorite scanner.
What repositories you like to check against further and who of you does a personal hijackthis analysis on his or her own machine just for evaluation?

polonus


I use HJT on my own computer (or the other 5 computers I support) about once a year. But, I like FreeFixer better and use it more often on the same 6 computers.


By all accounts they do, but as has been mentioned in other topics, rather than be completely helpful there are lots of what they call noise/rubbish transmitted as and when they are sent.

Personally I always advise the suer sends the sample directly to avast than rely on a third party.

This should be useful: List of Online Anti-Malware (File) Scanners :wink:

I need to check out Filterbit

Thanks for the info Polonus


Welcome to the forums, geohac :slight_smile:

Thanks for the link. I now have it bookmarked.


Quick update to everyone reading this posting. OPSWAT has replaced Filterbit.com with a new service at http://www.metascan-online.com, which now features many additional engines, an updated UI, and enhanced scanning performance.