I live at a place where we don't always always have internet. I wonder if there is something like VirusTotal but that could work without internet connection and sync when I have some wifi to update its database.
- 4VirusTotal is nothing more than a collection of all the AV engines that tests a submitted file. If you want to setup offline scans, you can configure VMs or docker images for the AVs you want to test against. The point and advantage of VT is all due to it being online since updates are pushed in real time. If there was presumably an offline version (there isn't any), it would be off little use anyway.void_in– void_in2015-06-20 19:56:51 +00:00Commented Jun 20, 2015 at 19:56
- You can build your own private version of virus total with something like this Malice or CloudAVuser99591– user995912016-02-07 08:15:42 +00:00Commented Feb 7, 2016 at 8:15
Add a comment |
2 Answers
IRMA is a good offline alternative to VirusTotal and is open-source!
Like the others say it's nothing more than a collection of AVs at the difference that they working all together correctly. You give your file once instead of giving it to all your AVs.
This answer is maybe late for you but it can serve others.
- 1Please try to avoid product recommendations on this forum. Products can easily become outdated and result in your answer not being useful anymoreLimit– Limit2018-03-08 00:03:56 +00:00Commented Mar 8, 2018 at 0:03
You could have a Virtual Machine set up, and buy subscriptions to/download the free versions of all the anti-virus engines you like (for instance, the list VirusTotal has), install them one at a time (making sure to turn off all the automatic features except updating - no on-line scanning, no email integration, no Web Toolbar, no SafeSearch, no URL checking, etc. etc.).
Then you could copy a file to the VM or use shared storage or whatever and scan it with every engine. The more advanced method, of course, is to automate the scans with each engine - either a batch file, or a program that calls each of them one at a time and reports the results.
You can then bring the VM online and update them all whenever you can/need to; again, automating that will help keep your workload down. You can also take snapshots of the VM and be able to go back to previous version to see if a particular piece of malware was detected differently some time ago; i.e. to track the change in detection, though that's a bit cumbersome and snapshots will slow down performance and use drive space.
- There are plenty of frameworks that essentially automate this.forest– forest2018-03-08 06:27:30 +00:00Commented Mar 8, 2018 at 6:27