Free malware scan
Check a file for malware before you open it. Upload it and we scan its content against our malware signatures, fingerprint corpus and YARA rules, looking inside archives too. The file is scanned in our cloud, never executed, and not kept afterwards.
Uploading & scanning…
When to check a file for malware
Scan a file before you open it whenever you did not expect it or cannot vouch for where it came from: an attachment from an unknown sender, an invoice you were not waiting for, a program downloaded from somewhere other than its maker's site, a document passed around on a USB stick, or a file a customer uploaded to you.
What the scan checks
- Known malware fingerprints. The file's hash is compared with a corpus of known malicious files. To check a hash without uploading anything, use the malware hash lookup.
- Signatures and rules. The content is matched against malware signatures and YARA rules, which recognise families and techniques rather than one exact file.
- Archives. Zip and other archives are opened and every file inside is scanned, so malware cannot hide one level down.
What a result means
A detection names the malware family or rule that matched: do not open the file, delete it, and if it came by email, warn the sender through another channel. A clean result means nothing known matched. It is good evidence, not a guarantee: brand-new or targeted malware may not be recognised by anyone yet, so a file you still have doubts about should not be opened on a machine that matters.
Suspect a website has been injected with malware?
This tool checks files, not live websites. If you think a site has been compromised, download the files that changed recently from the server (PHP, JavaScript and theme or plugin files are the usual places) and scan them here, one at a time. For WordPress sites, also check your core version and plugins in our WordPress vulnerability check, because an outdated plugin is the most common way in.
Scanning servers and incoming files continuously
One upload at a time suits a single suspicious file. To scan servers and the files that arrive on them every day, see how to scan a server for malware: our agent checks new files in the folders you choose as they arrive, runs scheduled scans, and quarantines what it finds on Windows and Linux.
Common questions
Is the malware scan free?
Yes, with no account, for 5 files a day, up to 10 MiB per file.
Do you keep my file?
No. The file is scanned on our own servers and is not kept afterwards. It is never run.
Can it scan a password-protected archive?
No. An encrypted archive cannot be opened without its password, so the files inside cannot be checked. Extract the file you are worried about and upload it on its own.
Scan every file your endpoints touch
Our endpoint agent checks new files as they arrive and quarantines known-bad content across your Windows and Linux machines, automatically.