View Single Post
  #8   Report Post  
Posted to uk.d-i-y
John Rumm John Rumm is offline
external usenet poster
 
Posts: 25,191
Default FreeFileSync scam

On 24/02/2018 15:19, Fredxx wrote:
I often use VirusTotal.com to checkout files I download.

There are two methods of entry, one is by entering the URL of an exe,
and the other is to upload the file you would have downloaded yourself.

If I enter:
https://www.freefilesync.org/downloa...dows_Setup.exe

I get 0/66 on VirusTotal

If I upload the same file I get 6/66.

Just be warned, scammers and those pedalling viruses in their software
can fudge the results, presumably from knowing the IP addresses used by
VirusTotal.


I have a suspicion you might be expecting rather more from the site than
its intended to deliver....

If you upload a file, it will indeed scan the file for malicious content.

If you scan a URL however it will scan the site/page for malicious web
based content - i.e. attempting drive by downloads, serving malicious
javascript etc.

It seeems unlikely its going to follow every link on a page, then
download every binary linked, scan every one, and and then report back.

On a site listing thousands (millions) of links that would require a
ridiculous amount of bandwidth.


--
Cheers,

John.

/================================================== ===============\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\================================================= ================/