Is virustotal.com legimate ?

[Vortex]

Is virustotal.com legimate ?

https://answers.microsoft.com/en-us/protect/forum/all/is-virustotalcom-legimate/a9d9038c-d9fa-4f7e-9136-015f7a32769b

[jj2007]

What a mess, Erol, but this line says it all: "I called the Microsoft consumer support department that deals with viruses and malware.   They did a number of scans that removed about 15 different malware programs"

[Vortex]

Hi Jochen,

That is surely a mess and we cannot trust that site. It's easy to verify.

DoNothing3.asm :

Code: [Select]

include     \masm32\include\masm32rt.inc

.code

start:

END start

https://www.virustotal.com/gui/file/4de55e19002513d2ecd1b79fba5a1fafda43b14f84050aed1e5f34c64797a594

4 security vendors and no sandboxes flagged this file as malicious

Malwarebytes

MachineLearning/Anomalous.100%
MaxSecure

Virus.Mabezat.Dam
Rising

Malware.Heuristic!ET#92% (RDMK:cmRtazocYn5Q7bcRqGsxsGOLlmeN)
SecureAge APEX

ERROR Unable To Scan (corrupt PE File).

Unbeliavable but true. They are just trying to scare people and enforce folks to purchase AV software. I cannot find any other explanation for this case.

I would rather suggest Jotti's site looking more reliable :

https://virusscan.jotti.org/en-US/filescanjob/e3fj6nayj8

[hutch--]

I have seen the same effect, what I call "The Mickey Mouse Club" share around their results untested. I have one simple window the displays an image loaded as a PNG and converted to a bitmap and the Mickey Mouse Club all flag it as having some obsure trojan in it and it is a garrantee with it built from source that there is no infection.

I use the default M$ AV and do occasional scans with Kaspersky KVRT.EXE.

[raymond]

What a mess, Erol, but this line says it all: "I called the Microsoft consumer support department that deals with viruses and malware.   They did a number of scans that removed about 15 different malware programs"

From my own experience with the MS support: it's almost useless.

Some time ago, I was receiving some "junk" e-mail doctored to indicate it was coming from them. Looking at the message source, I immediately realized that MS was not involved. I then tried to forward it to the Outlook team but my Windows system simply refused to transmit it back to MS on the basis that it contained a virus.

I then contacted MS asking how they could transmit such an e-mail to a customer but refuse the customer from forwarding it back to them!!!

Never got a straight answer. The only suggestion I ever got was how to minimize the amount of junk mail.

[morgot]

MachineLearning antivirus soft is the new kind of shit.

[hutch--]

I might add, I ditched MalwareBytes after it automatically deleted my defragger Auslogic. They used to be good but have joined the "Mickey Mouse Club" of shared profiles and they are just crap like the rest. The M$ AV works OK, occasionally a false positive but you can allow it if it gets flagged. For anything serious, KVRT.EXE directly from Kaspersky is not related to the "Mickey Mouse Club".