> I tell all my clients that when in doubt, drop that bad (?) boy in VT and let it scan it. Who are your clients? Are you aware that everything that's uploaded

> I tell all my clients that when in doubt, drop that bad (?) boy in VT and let it scan it. Who are your clients? Are you aware that everything that's uploaded to VT becomes public? As in full file contents, not just metadata & scan results. There's no harm in uploading .exe's there, but you should at least warn them not to upload private documents. Also, VT results are trash for anything new so "all green" doesn't necessarily mean you're safe to run stuff if it also happens to be the first time VT has seen the file. It's not even the VT's fault, AV's suck and everybody knows it. The value of VT is that once something gets detected people can go back in time and look for other incidents that had flown under the radar previously.