Online tools

These tools can help you investigate websites and make your opinion before rating a site.

Free online single file scanning

• http://virustotal.com (max file size 20 MB, 41 different antiviruses)
• http://virscan.org (max file size 20 MB, 37 different antiviruses)
• http://scanner.novirusthanks.org (max file size 20 MB, 24 different antiviruses)
• http://scanner.virus.org (max file size 5 MB, 23 different antiviruses)
• http://virusscan.jotti.org (max file size 10 MB, 20 different antiviruses)
• http://viruschief.com (10 different antiviruses)
• http://filterbit.com (9 different antiviruses)

Free online folder/computer scanning

Most of these antiviruses only work under Windows in Internet Explorer.

• a-squared : http://www.emsisoft.com/en/software/ax/?scan=1
• BitDefender : http://www.bitdefender.com
• Computer Associates : http://cainternetsecurity.net/entscanner/
• ESET (NOD32) : http://www.eset.com/onlinescan/
• F-Secure: http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/index.html (IE only)
• Microsoft OneCare : http://onecare.live.com/site/en-us/default.htm
• TrendMicro : http://housecall.trendmicro.com

(requires free registration to disinfect)

• Panda : http://www.pandasecurity.com/activescan/index/

(Detect but does not disinfect)

• Command on demand : http://www.commandondemand.com/eval/cod/
• Kaspersky : http://www.kaspersky.com/virusscanner
• McAfee : http://home.mcafee.com/Downloads/FreeScan.aspx
• Symantec/Norton : http://security.symantec.com/sscv6/vc_scan.asp

List of Legitimate Anti-Malware products

Here is a list of free anti-virus with real-time protection:

• avast! : http://www.avast.com/ (Requires FREE registration per year)
• AntiVir : http://www.avira.com/en/pages/index.php (NagWare)
• AVG : http://www.avg.com/ (NagWare)
• Comodo : http://www.comodo.com/
• ClamWin : http://www.clamwin.com/
• ClamAV : http://www.clamav.net/
• PCTools Antivirus : http://www.pctools.com/
• Panda Cloud : http://www.cloudantivirus.com/ (Beta)
• Prevx: http://free.prevx.com/ (currently unknown if it is 100% free)
• Microsoft Security Essentials : http://www.microsoft.com/Security_essentials/ (Requires GENUINE Windows)

Here is a list of free anti-spyware products with real-time protection:

• Windows Defender : http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
• Spyware Terminator : http://www.spywareterminator.com/
• Spyware Doctor : http://www.pctools.com/spyware-doctor/ (No removals)
• Spybot S&D : http://www.safer-networking.org/index2.html
• Ad-Aware : http://www.lavasoft.com/ (Active scanning security)

Here is a list of free anti-spyware products:

• MalwareBytes : http://www.malwarebytes.org/
• SUPERAntiSpyware : http://www.superantispyware.com/
• SpywareBlaster : http://www.javacoolsoftware.com/index.html

MX tools

Check if IP or domain is blacklisted as a source for Spam

• http://www.mxtoolbox.com/ : Check each MX record (IP Address) against 147 DNS based blacklists.

Spam / PHISH aggregators

• AbuseButler : http://spamvertised.abusebutler.com/
• joewein.de LLC : http://www.joewein.net/
• PhishTank : http://www.phishtank.com/
• Project Honey Pot : http://www.projecthoneypot.org/
• SORBS (Spam and Open-Relay Blocking System) : http://www.us.sorbs.net/
• SpamCop : http://www.spamcop.net/
• SURBL : http://www.surbl.org/
• uriBL : http://www.uribl.com/

Reputation tools

These tools can help evaluate the reputation of websites. Some are based on user reports, corporate/organisation reports or automated tools (links checkers, antiviruses, sandboxes...)

• MalwareUrl : http://www.malwareurl.com
• AVG LinkScanner : http://linkscanner.explabs.com/linkscanner/avg/
• Unmask Parasites : http://unmaskparasites.com/
• McAfee TrustedSource : http://www.trustedsource.org/en/tools
• McAfee SiteAdvisor : http://www.siteadvisor.com/
• hpHosts : http://hosts-file.net/
• MalwareDomainList : http://www.malwaredomainlist.com/mdl.php
• MalwarePatrol : http://www.malwarepatrol.net/lists.shtml
• Norton SafeWeb : http://safeweb.norton.com/

Network tools

• http://www.aguse.jp/ : whois, DNS, thumbnail, blacklist check, more.
• http://centralops.net/co/ : Free online network utilities
• http://clez.net/net/ : Free complete network tools for online research.
• http://whois.domaintools.com/ : Whois lookup and Domain name search.
• http://www.who.is/ : whois, DNS, more.
• http://ping.eu : online ping/whois/traceroute/port check/reverse lookup/...
• http://www.geoiptool.com/ : Free online geolocation (from server name or IP)
• http://ipinfodb.com/ : Free online geolocation (from server name or IP)
• http://www.robtex.com/ : Swiss army knife internet tool. Check: RBL, DNS, IP, C-net, whois, Route, AS info, and more.
• http://untiny.me/ : Get real url from shortened URLs like tinyurl.com (and other) without actually following the link
• http://www.just-traceroute.com/ : Traceroute from 4 different locations.

Pharmacy verification

LegitScript (USA and Canada) : http://www.legitscript.com/

SSL Certification testing

http://www.digicert.com/help/ : Checks SSL Certificate for proper installation, if it times out, there is no SSL issued.

List of Noteworthy Internet Explorer addons

• heise SSL Guardian : http://www.h-online.com/security/features/Heise-SSL-Guardian-746213.html
• IE7Pro : http://www.ie7pro.com/
• KeyScrambler : http://www.qfxsoftware.com/Download.htm

Find more at http://www.ieaddons.com/en/

List of Noteworthy Firefox addons

• Adblock Plus : http://adblockplus.org/
• BetterPrivacy : http://netticat.ath.cx/BetterPrivacy/BetterPrivacy.htm
• Firebug web development evolved : http://getfirebug.com/
• FireFTP - free, secure cross-platform FTP client : http://fireftp.mozdev.org/
• FlagFox : https://addons.mozilla.org/fr/firefox/addon/5791
• Flashblock : http://flashblock.mozdev.org/
• Ghostery : http://www.ghostery.com/
• Host Spy : http://hostspy.org/tools
• KeyScrambler : http://www.qfxsoftware.com/Download.htm
• NoScript : http://noscript.net/
• RequestPolicy: https://addons.mozilla.org/en-US/firefox/addon/9727/
• SSL Blacklist : http://codefromthe70s.org/sslblacklist.aspx
• Targeted Advertising Cookie Opt-Out : http://taco.dubfire.net/
• The Web Developer extension : http://chrispederick.com/work/web-developer/
• URL Fixer : http://www.chrisfinke.com/addons/url-fixer/
• Wikipedia Toolbar : https://addons.mozilla.org/en-US/firefox/addon/6401

Find more at https://addons.mozilla.org/

Check for obsolete (and unsecure) software

Scans for outdated software that is vulnerable to exploit codes, etc.

• F-Secure : http://support.f-secure.com/enu/home/onlineservices/fshc.shtml
• Secunia OSI : http://secunia.com/vulnerability_scanning/online/
• Plug-In Check for Firefox : https://www-trunk.stage.mozilla.com/en-US/plugincheck/

Filehippo..?

Miscellaneous

• Better Business Bureau (USA and Canada) : http://www.bbb.org/
• BoardReader domain link check : http://boardreader.com/domain/mywot.com
• AutoShun (snort list) : http://www.autoshun.org/
• Snort network intrusion prevention and detection system (IDS/IPS) : http://www.snort.org/
• Malicious code detection (PDF/Javascript/Flash): http://wepawet.iseclab.org/
• Anubis : http://anubis.iseclab.org/ (reports the behaviour of a Windows executable and activities in Internet Explorer)
• NetworkMiner (Network Forensic Analysis Tool (NFAT) for Windows) : http://networkminer.sourceforge.net/
• Norman Sandbox : http://www.norman.com/microsites/nsic/Submit/en (reports the behaviour of a Windows executable run inside a virtual machine).
• Sandboxie : http://www.sandboxie.com/ (reports the behaviour of a Windows executable run inside a sandbox)
• Bitzi : http://bitzi.com/ (Collaborative file identification)
• Site Dossier : http://sitedossier.com/
• Spamavert.com : http://spamavert.com/ (obtain spam from this small inbox)
• Tor : http://www.torproject.org/ (surf with more privacy)
• VB100% : http://www.virusbtn.com/vb100/index (keep updated on which antiviruses are passing the latest malware tests)
• Pop-up Test : http://www.popuptest.com/ (tests your pop-up blocker)
• PC Flank Security Tests : http://www.pcflank.com/index.htm (scans for possible exploits you are leaving behind you)
• SystemLookup : http://www.systemlookup.com/ (search engine for CLSIDs, services and etc. listing them as either legitimate or malicious)
• Newly Registered Domain Names : http://domain-daily.com/