Google's VirusTotal adds desktop file analysis client for Apple's OS X
Google's online malware analysis tool VirusTotal, which acts as a "meta scanner" for suspicious files, on Monday announced the availability of a new desktop upload client for the Mac.
Using the new tool -- which has long been available for Microsoft's Windows platform -- Mac owners can more easily upload suspicious files for VirusTotal to analyze, which the company hopes will help beef up their database of OS X threats. VirusTotal works with more than 50 computer security vendors, allowing users to subject possible malware to a battery of tests without needing to install multiple desktop scanning applications.
According to the company, users can drag-and-drop individual files, entire folders, or even a complete binary application for analysis. Installing VirusTotal will also add a new entry to the "Open With" option in Finder to send a file for scanning from the context menu.
The Mac has become an increasingly popular target for malware authors, with some reportedly netting as much as $10,000 per day from their creations. While a number of third-party firms make antivirus software for OS X, Apple has also worked to add built-in protections.
Apple debuted a system known as XProtect -- which automatically quarantines files based on a frequently-updated list of malware downloaded from Apple's servers -- alongside Snow Leopard. The company then added Gatekeeper, which is designed to prevent users from "unknowingly downloading and installing malicious software" by helping ensure that only software from the Mac App Store or registered Apple developers can be run, in Mountain Lion.
Using the new tool -- which has long been available for Microsoft's Windows platform -- Mac owners can more easily upload suspicious files for VirusTotal to analyze, which the company hopes will help beef up their database of OS X threats. VirusTotal works with more than 50 computer security vendors, allowing users to subject possible malware to a battery of tests without needing to install multiple desktop scanning applications.
According to the company, users can drag-and-drop individual files, entire folders, or even a complete binary application for analysis. Installing VirusTotal will also add a new entry to the "Open With" option in Finder to send a file for scanning from the context menu.
The Mac has become an increasingly popular target for malware authors, with some reportedly netting as much as $10,000 per day from their creations. While a number of third-party firms make antivirus software for OS X, Apple has also worked to add built-in protections.
Apple debuted a system known as XProtect -- which automatically quarantines files based on a frequently-updated list of malware downloaded from Apple's servers -- alongside Snow Leopard. The company then added Gatekeeper, which is designed to prevent users from "unknowingly downloading and installing malicious software" by helping ensure that only software from the Mac App Store or registered Apple developers can be run, in Mountain Lion.
Comments
over my dead body
Why?
"Honest, Boss, I was just trying to see if the company office documents might contain a virus."
Haha, that's like trying to cure AIDS with AIDS
No, thank, you.
The Mac has become an increasingly popular target for malware authors, with some reportedly netting as much as $10,000 per day from their creations. While a number of third-party firms make antivirus software for OS X, Apple has also worked to add built-in protections. "
If I didn't know any better, it sounds like AI is shilling for this product. I've been using Macs for 15 years and not ONCE have I had malware or needed something like this.
my first thought as well. Especially the way the 'article' is worded to sound like there is a huge threat out there. When in truth most Mac malware is actually Flash or Java based and solved within a few days.
Wait what? Since when does Google own VirusTotal?
On-topic, VirusTotal is actually really useful when you have a suspicious file you want investigated - for example, if you suspect your own antivirus is missing something or giving you a false positive. It's also good if you're a sysadmin / tech support person / similar: you can use VirusTotal to scan Windows executables from a Mac without an AV installed.
I started removing old Google software from my machine and my performance improved vastly (what the heck did Google need to install on my machine ANYWAY). Now they want to write more stuff for my Mac? No thanks!
From their Terms and Conditions page (exact quote):
When you upload or otherwise submit content, you give VirusTotal (and those we work with) a worldwide, royalty free, irrevocable and transferable licence to use, edit, host, store, reproduce, modify, create derivative works, communicate, publish, publicly perform, publicly display and distribute such content.
If you do not want the content provided by you to VirusTotal to be disclosed in the manner set out in these Terms or in the Privacy Policy, do not send it/share it with VirusTotal or the VirusTotal Community.
No, they don't own your content (you retain ownership rights except in cases of copyright infringement), but you're letting them and third parties use your content (in the broadest sense possible), including storing, reproducing, displaying and distributing it publicly.
From their Terms and Conditions page (exact quote):
No, they don't own your content (you retain ownership rights except in cases of copyright infringement), but you're letting them and third parties use your content (in the broadest sense possible), including storing, reproducing, displaying and distributing it publicly.
Isn't that there so they can share uploaded files with antivirus vendors?
edit: yeah, it is:
If I didn't know any better, it sounds like AI is shilling for this product. I've been using Macs for 15 years and not ONCE have I had malware or needed something like this.
my first thought as well. Especially the way the 'article' is worded to sound like there is a huge threat out there. When in truth most Mac malware is actually Flash or Java based and solved within a few days.
I'm sure AI is making a ton of money from "shilling" this service.
Isn't that there so they can share uploaded files with antivirus vendors?
Antivirus vendors don't need an implicit license to create derivative works from, publish, or display your works publicly to do their job, but the Terms of Service specifically allows it.
Antivirus vendors don't need an implicit license to create derivative works from, publish, or display your works publicly to do their job, but the Terms of Service specifically allows it.
Creating a virus detection from an uploaded file could be seen by a court as a 'derivative work' - the legal status of 'derivative work' as applied to software is somewhat unclear, and such a signature could easily contain unique (and potentially copyrighted) sections of the file in question. The distribution of said signatures to their consumers could also constitute publication (and possibly 'displaying' too).
Also, apart from anything else, why would you upload private data to VirusTotal? It's a virus scanner - the only things you should be giving to them are files you think are malware.
Thanks for the reminder of this, although I'd already decided that I wouldn't use it because I've not had a virus since Apple's System 7. I'd almost forgotten how intrusive Google can be and is.
No need for this as Clam AV takes care of my suspect Windows originating files.
The issue isn't whether your particularly odd and narrow interpretation of the term "derivative works" is correct; the issue is that it's isn't the only possible interpretation. The wording of the terms of service is too broad in this regard, and does not limit third parties to just accessing your files to perform antivirus services. In fact, there is no limitation spelled out whatsoever about what third parties can do with your files.