How to test your applications on popular virus scanners?

Question

I need to find out if my applications will be marked as viruses by the most popular antivirus packages (not better, but the largest by user base). Therefore, I would like to know how others do it. Some prerequisites:

I have an application written in Delphi. Since the Delphi virus was discovered, I have had problems with false positives in my applications, especially my demos for some reason (they all have the same code). AVG was good, and now I can easily list my files, but then I got the latest DevExpress installer, and it was false too. Given that this is becoming more common, it seemed to me that I need to find out if my applications are marked with the most popular antivirus packages. Therefore, I would like to know how others do it. I don’t want people to download our demos, get an AV warning and decide not to try.

The only options I still buy are downloading AV packages and putting them into a virtual machine or using a service like VirusTotal . The latter seemed to be ideal, but in order to limit testing files to 20 MB, and my files are larger than this. There is no way to pay for the opportunity to expand opportunities. (I thought it was a weird limit, but the free check of the Kaperskis player is limited to 1Mb!)

How do you test your applications?

Answer 1

My thoughts on this are as follows: I created a computer (nothing special) with lots of disk space. I will call it ScanPC. Each time I make an assembly, the script copies the new files in ScanPC to the assembly-specific directory. This will ensure that I have an archive of all the assemblies that can be checked. Anyone can be released to customers.

Now I am installing the VMWare server and setting up several virtual PCs. In each I set up anti-virus software to scan a network resource, but in read-only mode so that no scanner could accidentally change or delete a false positive result. Then each virtual machine can automatically update from the provider, and I hope they will have an email option to let me know when they detect a virus, which I then know is false positive and can inform the supplier.

The advantage of this is that I have a complete archive of the assembly (I need something anyway), which means that older versions with clients that run AV are identified in the same way as the most recent ones. This means that I can add or remove AV products as needed. This means that I only need one computer (performance is not important).

Answer 2

VirusScan.jotti.org and VirusTotal.com can help

Answer 3

http://online.us.drweb.com/

I could not see the file size limit