Quantcast
PCWorld.com is upgrading some back-end systems. Some site features, such as user registration, may be temporarily unavailable.

Blogs

    Privacy Watch

  • Few things are more valuable than your personal data. Associate Editor Erik Larkin shows you how to protect it.
  • Subscribe to this blog

Is It Really a Virus? Get a Second Opinion

Erik Larkin

Is It Really a Virus? Get a Second Opinion-image

Illustration: Mark Matcho
Even if your antivirus application says that a file your kid just downloaded is okay, you may still feel leery. Or maybe your antivirus program wants to delete or quarantine a file on your PC, but you're pretty sure that the file's harmless. What do you do?

I head to two free online services for a broader analysis. The first, Virustotal, has been around for some time. It uses 32 different antivirus engines from a range of companies, including Symantec, McAfee, and Kaspersky, to scan any file you upload.

Click on the 'browse' button at the top of the page to find the file on your PC. Then, sometimes after a short delay, you'll see what each engine thought of the file you uploaded--in the form of a bluish 'no virus found' or a red message with either a generic warning like "suspicious Trojan/Worm" or the name of specific malware like "Warezov."

Sometimes there will be a range of responses. Some engines might think everything is hunky-dory, while others might insist that your file is dangerous--which is a great example of why you'd want a second opinion in the first place.

Most of the time you can go with the consensus view, particularly when only a few engines give generic warnings. Those vague warnings typically come from heuristic technology, which tries to identify unknown malware without full signatures. The technology is useful, but it can raise false alarms.

For even more-exhaustive in-depth analysis, go to Threat Expert. Click 'Submit Sample', and you'll be prompted to upload a file (up to 5MB). Threat Expert analyzes your submission and e-mails you a report. You'll see results from numerous antivirus engines, but the report will also list other details, including whether the sample tries to delete any of your files or directories, change the hosts file, or create Registry keys. Also, you can see what the tested file tried to download from other places when it ran.

Erik Larkin is an associate editor for PC World. You can send him e-mail at privacywatch@pcworld.com.

  • Recommend this story?
  • 0 Yes
    0 No

"Is It Really a Virus? Get a Second Opinion" Comments

Featured APC Accessories

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

Focus on Personal Productivitysponsored by Microsoft

  • Personal Finance 2.0 These free and fee-based Web services not only aggregate data from your online bank accounts, they give you tools for managing your money.
  • High-Tech Travel Tips Plenty of stories provide advice for elite mobile professionals. But what about you, the unproductive traveler?

People who read this also read:

Privacy Watch

All PC World Blogs

  • 15 Minutes to a Secure Business Get the Secure in 15 toolkit starting with the "15 Minutes Month-at-a-Glance" calendar. McAfee will send you additional tools and tricks to stay protected around the clock.
  • A Buyer's Guide to Data Protection Implementing data protection products and processes can be daunting. Make the right decisions by exploring what is available and what makes sense for your organization. Use this simple guide to evaluate different vendor offerings.

Sponsored Links