full-disclosure - [VirusTotal] Scan result (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: lists at michel-messerschmidt.de (Michel Messerschmidt)
Subject: [VirusTotal] Scan result (fwd)

On Thu, Sep 02, 2004 at 04:01:16PM -0400, ?ber GuidoZ wrote:
> It's kind of interesting to see the results, as it shows you what AV
> programs seem to detect things better then others. 

I think this is actually misleading. 
You know nearly nothing from scanning just a single (or 10, 50,...) 
sample. And there are other basic test requirements. For example:
- the different results could be due to differences in the update 
  schedule at virustotal.com (some vendors offer their fastest updates
  only for premium licenses, which virustotal may not have). 
- maybe some products are used with optimized settings (for example 
  maximum heuristic detection) and others with default settings.


> It's also useful 
> for known viruses, but needing to know what each AV program calls
> them. (I find this useful when trying to do tech support.)

You know Vgrep (http://www.virusbtn.com/resources/vgrep/index.xml) ?


-- 
Michel Messerschmidt           lists@...hel-messerschmidt.de
antiVirusTestCenter, Computer Science, University of Hamburg