How to QUICKLY Check if a file is a VIRUS?

In this video I showcase the automated ANY.RUN sandbox
Sign up for a free ANY.RUN account with your business email:
app.any.run/?u...
Official Discord Server - / discord
Follow me on X - / atericparker
Disclaimer: The content in this video is for education and entertainment purposes to showcase the dangers of malware & malicious software. I do not encourage any form of illegal hacking, nor do I encourage the usage of game cheats, cracks or hacks.
Cracks are sometimes shown to highlight the dangers of software piracy, my content is not intended to teach anybody how to pirate, or maliciously hack.
More Malware Investigation Videos:
→ The latest "NORD" Malware - Nordsecured: • The latest 'NORD' Malw...
→🧧VIRUS WARNING🧧 NEW Optifine for Minecraft 1.16 SCAM: • 🧧VIRUS WARNING🧧 NEW Op...
→ The wilkreate KZbin stealer virus that started this whole trend: • Fake sponsor DESTROYS ...
(C) Eric Parker 2024

[@kajoma1782]

I usually find out whether a file is a virus or not if it's already too late.

[@Xbs_Rebass]

virus total and malwarebytes on every sketchy file

[@Seallbay]

@@Xbs_RebassVirus Total is great

[@𤙵]

@@Xbs_Rebassmy rat bypass all of it

[@Saf1-]

@@𤙵 Interesting...

[@nameless2915]

@@𤙵 i get abt virus total and malwarebyte idk day zero?? the biggest thing is it could probably even cap ngl.

[@cinderwolf32]

"you can't use that exploit anymore, it was patched four updates ago" "Remove the update"

[@granityseis104]

chad

[@0ptic0p22]

and this comment is actually tru its a bug since feb 24

[@alexanderelderhorst2107]

Actually that makes sense why that worm removed some updates

[@Aestareth_]

>instructive video >look inside >ad

[@Anjo_2807]

i think its an instructive video and an ad hybrid I can say lol

[@DoinkDeetus]

A better way to find out which aimbot file is a virus is to run it and see if you get hacks or get hacked.

[@freedustin]

lots of malware gets spread like that via free cheat downloads. the cheats do work. and also install malware in the background.

[@DoinkDeetus]

@@freedustin 2 for the price of 1?!?!? 🤑🤑🤑

[@gigachad1622]

@@freedustin Instant Karma be like

[@proxzi]

malicious vst's 'plugins' for music production that come with malware is whole another world as well my brother, great vid, glad to see rising the awareness of ppl

[@user-lt2rw5nr9s]

I've found malware injected in the Installer/Setup executable, but have you seen malware in the plugin DLL that gets loaded by the DAW?

[@proxzi]

@@user-lt2rw5nr9s I believe, and didn't rly come across one that gets injected by the daw itself while loading it on the mixer insert but one that just pretends to be a part of vst or hides in a dll while getting side loaded by sum diff that has been set up thru the installer, tho perhaps ur right and it worked so well that I got infected and dont even know about it

[@ferdmusic8]

Until a few months ago I actually assumed they would be safe until I learned it is just c++ code and you are not restricted by anything

[@adviththegreat5610]

As music is my hobbby and spending hundreds on plugins is not really possible for me so I got a bunch of free ones. But I did check their reviews on youtube and verify the original sites and most of them were from legit developers so I guess I should be safe. But pirated plugins is a whole new deal. Pirating games and stuff is one thing which is extremely normal but editing and production software becomes really risky to pirate.

[@domgru]

@@proxzi everytime i load flstudio. after i have a task in the background (in the taskbar) thats invisible. idk what it is. u cant right click it. its just there

[@fingius]

I'm guessing the easiest way is using virustotal or something like that

[@EricParker]

Sandboxes are better because VT relies on signatures. Sandbox is behavioral.

[@chocolateimage]

@@EricParker i can upload brand new files that are malware and it shows a lot of detections

[@nexonnera.k.a.8796]

​@@EricParker virustotal already has sandboxes and behaviour tab

[@yoyovfx]

@@chocolateimage okay and he didnt say otherwise? signatures are in the byte code of the file so even if it's a new file, it'll contain the same byte signatures in it

[@chocolateimage]

@@yoyovfx I can make and compile one myself and it'll show up as detected

[@Sypaka]

The Windows Update which got removed there, is the MRT - the secondary antivirus. If they need to remove that one, says a lot.

[@awesomeguysuncle]

Any run looks cool but you can't sign up without a specific email

[@solidkeys]

You can, you need to verify for an account in their discord server

[@ja26gu]

What should i write?​@solidkeys

[@kadrikarakoc807]

@@solidkeys The problem is why would everyone need to my personal infor for using some stupid program? Why my name is important? just let program check the file i send and say virus or not.

[@Kleyguerth]

And the free option is gone, it's only a 14 day trial now

[@solidkeys]

@@kadrikarakoc807 if something is free, you are the product. After all running a server to run vms is not free

[@jakeyyyyyyyy]

In my experience the problem with sandboxes is the OS is fairly empty, so it's fairly easy to detect them

[@breadcraft3605]

"the OS is fairly empty" is not an indicator of a sandbox

[@breadcraft3605]

"the OS is fairly empty" is not an indicator of a sandbox

[@yoyovfx]

@@breadcraft3605 well in the case of galaxy swapper for example, they could check if you have Fortnite installed, if not then it would obviously be a sandbox

[@Likemea]

"the OS is fairly empty" is not an indicator of a sandbox

[@breadcraft3605]

@@yoyovfx ok, that's game cheats, but in general a barebones OS install is not an indicator

[@sipalichu]

i guess that if we add a russian keyboard we can stop some malware?

[@kidnamedfinger.productions]

Not really. Some big malware as service tools based in Russia will prevent execution for russian users to not get wanted by police but there's still a lot of malware that wont care

[@dyhidrogenmonoxide]

In this case yes, but it's just as possible that some malware might target russians specifically, given the current situation, and either way it's not reliable.

[@aunthunt]

​@@dyhidrogenmonoxide for what

[@omegahaxors9-11]

It's a stupid idea to change the way you operate just to avoid malware, though in some cases it's so cheap to do so that many official antiviruses will modify your system to disarm common forms of malware. Main example is there was a nasty malware going around that was fettered by simply making a fake payload file. It's like 10 bytes max to make so why not include it?

[@torincsgo221]

Your assumption is indeed very correct, despite what other people claim. Most malware spread is marketed and main markets are russian speaking forums which disallow the advertisement of malware that can work in CIS regions, hence developers are forced to make a check for any CIS language check. the only strain you can actually catch is selfwritten or a malware that is not popular, hence not marketed, hence not restricted.

[@yixo]

So this video is basically worthless unless you're willing to signup at min or straight pay for the website. So it's one big ad.

[@Z3rgatul]

Spinning up virtual machines cost a lot of CPU and RAM resources. What did you expect?

[@yixo]

@@Z3rgatul How to QUICKLY Check if a file is a VIRUS?

[@JohnDelayLi]

​@@yixo And you got the answer? throw it into a virtual machine. As quick as you're going to get. If you're really fiending for time, just quick scan it with something, but you still run the risk of getting injected.

[@MonotAkaro]

There's no magic pill, Billy. If you want to one-click check if a file is a virus, then do so in a VM. AMOF, the video was spot-on. You can literally upload a file & get a quick report on whatever the F it does. As a free trial, it is limited. But nothing is free. Even those trials cost resources.

[@Kamikarus]

naaah I won't be paying 300 DOLLARS A MONTH, I also don't have a bussiness email, that's just.... ridiculous

[@IAmTerminallyBored]

I’ve used the free version of AnyRun in my malware analysis class. Free version still works fine.

[@Logini228]

It says free for non-comercial use

[@bad_atgames]

​@@Logini228if they couldn't figure this out they probably shouldn't be running a service like this in the first place

[@DaFiestyBanana]

​@@Logini228Still requires a business email

[@olafcio]

$299/month

[@Xathian]

Be careful, he just deleted my comment for saying the same thing. Not allowed to state simple facts about sponsors around here I guess

[@Confractus_]

​@@XathianIt's free for non commercial use if I'm not mistaken

[@allan_8680]

Why he would delete your comment, If there are hundreds of the exactly same comments that he didn't delete?​@@Xathian

[@Cr1tic9l]

0:22 bro traveled to the future to get this screenshot

[@Bruns07]

Yes I must say this video is very useful for spotting viruses. Specially if you are uncertain about a file being a virus. You helped me a lot bro. Thanks man 👍

[@PSXman9]

you could at least write in the title that this is a 10:50 Minute long advertisement.

[@Imarealzombi]

he says it within 30 seconds of starting the video

[@EricParker]

YT also puts a banner right at the start in case anybody is confused. A sandbox is really the only way of achieving what I put in the title.

[@hn1f]

and one that certainly requires you to have your own custom domain email, the only closet thing you have to any run is triage

[@nobody-m6f]

from the moment I saw Anyrun link in description, I quit video lol

[@Kamikarus]

@@nobody-m6f sameee

[@volcanic_sloth]

this video is good, but... don't forget about cat ears at 100k

[@vtvl27]

Why is the free robux screenshot time set three months in the future? 0:31

[@smolbrendan5978]

a prophecy

[@33FoxWolf66]

​@@smolbrendan5978legend speaks of a prophecy. One day, the true free robux generator will create the richest person in all of Roblox

[@JaxieFlaxie]

so that in 3 months people will see this video and think its new

[@funky72_]

"How to QUICKLY Check if a file is a VIRUS?" - makes a 10 minute video

[@Kamikarus]

makes a 10 minute ad*

[@krekelyt]

Gotta collect that ad revenue

[@genesisreaper2113]

You all don't seem to realize that the alternative would be much, much longer to get this level of assurance. If you want to be quick and insecure use virustotal like everyone else. This is for those who want more security than that, in those terms this IS quick.

[@Super-il9nb]

​@genesisreaper2113 do the answer quickly then sat explanantions

[@funky72_]

@@genesisreaper2113 wow you seem to be fun around.. jokes aside I understand u fully man, I am a CS major so yeah 🙃

[@VitharPL]

Neither quick nor easy. Most of average users won't know what to look at.

[@marcospe2468]

The any run link looks really scammy, if I didn't know better I would assume its a virus

[@Timo-tm6rj]

yea thought the same, especially cause safari tells me its trying to impersonate any run

[@antih8r]

hi to my friend from the future :D

[@tPlayerioT]

that software youre using seems powerful to check malwares, i imagine its useful in your future videos? even though its an AD, it looks a great one

[@-C4-]

the greatest antivirus... having Russian language pack

[@mafusaku]

Hello eric, this is everybody

[@obviouslyaxo]

Haven’t watched this all yet but I’m excited Edit: Good job on getting sponsored!

[@MathewSan_]

Great video 👍

[@raz0229]

Just don't clone unpopular and unmaintained repositories and double-check with the source code before running it. I know, no one does that but its the protocol

[@shiroyasha0024]

Awesome content, keep it up ❤

[@venusdafur]

Honestly the best way to do it is to run the file and wait a week

[@YuraSuper2048]

nya nya remember the cat ears

[@2lay]

meow :3

[@sannukas23]

at 100k !!!

[@Likemea]

nope

[@TornadoVT]

meow :3

[@Likemea]

@@TornadoVT i always come back

[@_head0splitter]

guys remember if you destroy your pc with your own malware first enemy cant do it "To destroy your enemy you should destroy your self first" - Sun tzu

[@Meletion1]

I swear to god, I’m not sponsored, but any run is good.

[@sergeianov-q4m]

for anyone curious about why it wont go off if theres a Russian keyboard layout its because if Russian cybercriminals go after a Russian they can get fined or imprisoned

[@manperapp]

Really nice work! Great channel!

[@legendshadow547]

How to check whether file is a virus or not: Step 1: Open the file

[@gokurox1]

>How to QUICKLY Check if a file is a VIRUS >10 mins video

[@Bozebo]

Or better: If you have any reason to be concerned, just never ever run it unless it's purely for analysis. Don't even download it in the first place, or browse anywhere that would ever willingly promote such files.

[@chibisayori20]

do not download mods, just play the game the way it was intended compiled stuff tend to get fishy, if you have to resort to running compiled files to mod a game, maybe look for a different game to mod? one that provides a safer way to install mods

[@johnny56700]

Great video! Using this and triage, at least for my use cases, it is a combo for scanning and checking files :)

[@ClassicGameHacking]

I wonder if people look into my software, but there is something to see in there. Btw your channel is so cool.

[@jyngreen2250]

This way of checking if a file is a virus or not can be quick for IT professionals, but I don't see it being viable for the average Joe to interpret the connection to domains, check the execution tree of the file, etc.

[@Sintrania]

My best way to know if a file is a virus is to remote to my friend’s computer, put the file there or installed the program there. If nothing’s wrong then the file is safe for my pc.😊

[@NicoM701]

Okay What I learned: Dont click on fishy downloads and you are fine 😂

[@PatrolWiew]

Hey I like you’re videos keep up man

[@qy9MC]

Get the russian keyboard antivirus now!

[@test-rj2vl]

I was hoping for video how to check it without any run. Could you consider making such video also? It can be sandbox but it must be something that does not need account. Maybe even some virtual box machine that is designed to be sandbox and had some kind of web interface for monitoring like any run?

[@jmacku35]

I did something dumb last night and got a virus because I just wanted to get something done and go to bed. I was wondering, are there any services you know of like virustotal that run the virus in the vm, and then create a batch file or something to undo all the changes it did. Like it might be not perfect if the virus attacks apps not in the vm, but it could make it a lot easier to clean up, than having to go through everything manually?

[@alfonzo7822]

Best thing to do in that case is pull the device from the internet and use a known good system restore point or back up file from before the virus got on pc. If you have neither then it's time for fresh install.

[@lilia-ai]

I usually just search for a cheat engine cheat table instead of an exe lol

[@tronosgamingwizard]

8:46 - I don't like how there's the czech flag

[@Wisoven]

quickest way to tell is to execute it. If your wallpaper changes and it's demanding bitcoin to save your files then there's a chance it may not be legit and id look into an alternative. (Do not actually do this please)

[@blatantguide]

Thanks for this video it was actually interesting! ❤

[@me67galaxylife]

Don’t download sketchy files and don’t cheat

[@revival_of_the_canned_justice]

How am I supposed to get the handcannon in re4?

[@brettzolstick989]

Russian keyboard is the best antivirus

[@zushikatetomotoshift1575]

Cause it's a russian virus.

[@MasteRCrysiS]

Language check is not especially for checking russian, i've used a lot a bat to exe converter and the running compiled app is always checking the system language even if theres nothing in the bat file it compiled

[@nonameboi8859]

Why doesn’t the virus go off if you have russian keyboard profile installed? Is it perhaps a smart move to just enable an extra keyboard language like russian ?

[@tPlayerioT]

the hacker is also probably russian people. they dont target their own people looks like

[@justit1074]

its considered very illegal to hack in russia... if you are hacking other russians, hacking non-russians is fair game and is even encouraged by the russian government to a degree

[@rokasb9441]

If i rember well, the zip files have password to prevent anti virus systems from scanning them, common with these fake downloads

[@iken1308]

Nah, I think I'll stick to virustotal

[@cv7690]

Funniest part was I got a terrible video after this about free Valorant cheats 🤣🤣

[@blatantguide]

Hi! Let us know if you want to try our(your community) shits on this sandbox as a crashtest, by a mail or something. As Enderman was doing back in the day to see what actually happen with requests

[@Nerousek63cz]

its asking for a bussines email😭

[@EricParker]

I mention at the end the ability to contact them, but I will personally ask them if they would consider easing that requirement. To my understanding this is a sales thing that many b2b companies do. (and you can technically use any domain that isn't public mail)

[@apache937]

do you not own a domain?

[@kadrikarakoc807]

Dude this is not a sponsored video, this is just 10 minute advertisement :D

[@cx3622]

I love your voice man

[@tPlayerioT]

it is calming

[@s6ombie]

i just run it and check if my pc blows up

[@kokodi01]

easiest way to find out if a file is maleware or not is to run it

[@charmfool]

W erik for making this public

[@whamer100]

this just gave me an interesting concept idea, how well do malware samples run under wine or proton?

[@revival_of_the_canned_justice]

Nothing works properly on Linux, so it probably doesn't do well :v

[@whamer100]

@@revival_of_the_canned_justice what do you mean "nothing works properly on linux"

[@revival_of_the_canned_justice]

@@whamer100 It's just that, it has no deeper meaning.

[@igorthelight]

@@revival_of_the_canned_justice Ever tried Lutris? ;-)

[@user-ix6ok7fh9x]

i always upload to virus total, but most of time is an false positive

[@WindowsDestroyer]

If the owner of @download-links is watching this video please tell me why choose that tag

[@helikopterbojowyka-5234]

I’m really shocked my laptop managed to survive all my shit I did on it

[@qtgaming6902]

If it gives me a source code i usually just scroll and try to find malicious code

[@alespi2535]

Has it been said already that the best anti malware on the market is just installing russian keyboard?

[@ImNotQualifiedToSayThisBut]

So, hybrid-analysis?

[@tPlayerioT]

they dont target people with russian keyboard installed? installing rn.. 😆

[@TheGeladoo]

The title says "quickly" but this seems like a tool aimed towards people who know what they're doing, not laymen. Don't get me wrong, the tool probably does its job well, but I just watched this whole thing not understanding a single thing. This wouldn't really help me know what is or isn't a virus

[@PlanetXtreme]

Of course this video gets recommended the day I find out about the adware installed with cheat engine smh

[@LyllianaofMirrah]

you need to uncheck it when installing CE

[@PlanetXtreme]

@@LyllianaofMirrah I think only the patreon version does that now, unless I didn't uncheck all of them. But that's what it says on the site

[@LyllianaofMirrah]

@@PlanetXtreme sheesh

[@Rozwietr]

Not possible to get personal account when you're a hobbyist... I've tried it and got rejected.

[@studyalot596]

Thanks peter parker

[@Volict]

Hi, love your content! Can you check the T7 patch for Call of Duty Black Ops 3?

[@Splader]

You don't need the T7 patch anymore. The game was just recently updated and they also fixed crashing on Linux.

[@HiImKyle]

Damn sponsors already..

[@m.a.t.a.s]

I'll just install a Russian keyboard. Thanks for the tip

[@Archer690Channel]

dissapointed this isn't an sponsor for an aimbot

[@CommandProMC]

1:53 What happens if you run it on a computer with the Russian language installed?

[@the_primal_instinct]

How do I know you're real Eric Parker?

[@oliver-nation4377]

This is just hypothesis, but couldn't one just install the free version and use it to find a cracked version that isn't malware? ' Again it's hypothetical question, but it seems like a free version is just gonna backfire?

[@Mia_MelodyG]

Hello! I have a question, depending on the type of virus and what it does of course, will I as the Sandbox user or the website owners themself be at risk if I lets say keep it on for a minute or so? Im sorry if this sounds obvious im just really bad with this kind of topic lol

[@nicolaspropiano3official159]

You mean the any run web be at risk? The Sandbox is a one-time use, it doesn't affect you because you run in the website, and it's a Sandbox PC that's created right that moment, and has nothing to do with you, don't worry

[@tal2agamer498]

So we shouldn't not download galaxy swapper

[@braveltd]

lol, the thing when it was not going for us if we have Russian keyboard layout (as i do, i'm russian btw) is super weird and political... But i kinda i feel proud a bit...

[@miximario]

You didn’t say if the real file was legit

[@Rivizar]

Make a video on gaming tweaks/optimizers that youtbers often promote on their videos

[@mohammedissam3651]

max input file size even the paid version 100 MB !!!! too little my file size is 300+ MB and it is a setup "A Driver setup"... is these something local and un limited size testing

[@Camper_Lv]

Why when you google this thing, it gives different website.

[@tal2agamer498]

10 minutes aren't quick enough

[@shark123476]

I would love to see wemod in this, or just your opinion on how intrusive it is.

[@Pawlo370]

I have only friends who speaks to me only in Polish so for me it's easy to detect a hacker

[@s3nt3ry70]

Real og can feel what link is real

[@jmm1233]

this is good tips thankyou

[@Exo-Exibit]

I cant sleep no more now bc of this video 😭

[@CertifiedGangsta.]

easiest way is open the file and check if something is wrong😎😎😎😎🥶🥶🥶🥶🗣🗣🗣🗣💯💯💯💯💯

[@themissinfowar6629]

Now do Mac virus analysis ( ͡°╭ ͟ʖ╮͡├┬┴┬┴ 🖥

[@nukehype]

🖤 I use others, this one seems better, hilarious you brang up russian keyboard 3:03 , I was learning russian when I was younger, I am english so russian keyboard has been on my pc for a long time, its so funny how many times that might have saved me since that was on the pc I downloaded the most dogy content without checking but never had consequences after 8 years lmfao, knew about this before this vid but always makes me laugh...

[@Ниггерфиш]

they probably have a check for the mnemonic russian layout to ultra hyper rape my pc i couldn't learn йцукен even if my life depended on it 😭