Jotti Malware Scan: How to Use This Free Online File Scanner

If you've downloaded a file from an unfamiliar source and aren't sure whether it's safe, Jotti's malware scan (virusscan.jotti.org) is one of the most straightforward free tools available. It submits your file to multiple antivirus engines simultaneously and returns their verdicts — all without installing any software.

What Is Jotti's Malware Scan?¶

Jotti's malware scan is a free online file-scanning service operated by Joost Pol since 2002, making it one of the longest-running multi-engine scanners on the internet. It passes uploaded files through up to 14 antivirus engines and displays each engine's verdict.

Engines currently used by Jotti include AVG, Avira, BitDefender, ClamAV, Dr.Web, ESET, F-Secure, G Data, Ikarus, K7, McAfee, Sophos, and Trend Micro — the lineup changes periodically as vendors update their API access.

How to Use Jotti's Malware Scan¶

Step 1: Navigate to the service
Go to virusscan.jotti.org in your browser.

Step 2: Upload your file
Click the upload button and select the suspicious file from your system. The maximum file size is 250 MB. Files are transferred over HTTPS.

Step 3: Wait for results
Scanning typically takes 10–60 seconds depending on file size and engine queue length. You'll see a real-time update as each engine completes its scan.

Step 4: Review the results
Each engine shows one of several statuses:
- Clean: No malware detected
- Infected / Found: Malware detected, with the detection name shown
- Suspicious: Heuristic detection — not confirmed malware but flagged as potentially dangerous
- Error / Timeout: The engine couldn't complete the scan

How to Interpret the Results¶

Multiple Detections = High Concern¶

If 5 or more engines flag the file, treat it as almost certainly malicious. Different engines use different signatures, so broad consensus is a strong indicator.

1-2 Detections = Investigate Further¶

A single detection might be a false positive — especially with obscure freeware, custom scripts, or software cracks. Search the detection name (e.g., "Heur.HEUR/AGEN.1234567") online to see if others have reported it as a false positive.

Zero Detections ≠ Safe¶

Jotti tests against known signatures. Zero-day malware and heavily obfuscated threats may evade all 14 engines. A clean result reduces suspicion but doesn't guarantee safety.

Jotti vs. VirusTotal¶

VirusTotal is the dominant multi-engine scanner and offers some advantages:
- Over 70 antivirus engines vs. Jotti's 14
- URL scanning in addition to file scanning
- Public file hash lookups — if someone else already scanned the same file, you get instant results
- API access for developers

However, Jotti has advantages too:
- No file sharing with third parties beyond the AV vendors used for scanning (important for sensitive documents)
- Simpler interface — easier for non-technical users
- Files are not publicly shared or added to threat intelligence feeds by default

For most users, VirusTotal is the better choice for malware detection breadth. But Jotti is valuable for a quick second opinion or when you prefer not to submit files to Google's ecosystem (VirusTotal is owned by Google).

Privacy Considerations¶

When you upload a file to Jotti (or any online scanner), be aware:
- The file leaves your system and is transmitted to Jotti's servers
- It is then submitted to the AV engines for analysis
- Do not upload files containing sensitive personal data, confidential business documents, passwords, or private photos — even if you suspect malware is embedded

For sensitive file scanning, use a local antivirus scan or an offline sandbox like Cuckoo Sandbox running on an isolated virtual machine.

FAQ¶

Is Jotti's malware scan free?
Yes, completely free with no account required. There are no premium tiers.

How large a file can I upload to Jotti?
The maximum file size is 250 MB.

Does Jotti scan URLs?
No — Jotti only scans files. For URL scanning, use VirusTotal or URLscan.io.

Is it safe to upload files to Jotti?
For ordinary files you suspect may be malware, yes. Don't upload files containing sensitive personal or business data.

What if Jotti says a file is clean but I still feel something is wrong?
Trust your instincts. Run the file through VirusTotal for a broader scan, submit it to Any.run for behavioral analysis, or simply delete it and download from an official source instead.

This article is published by ScamSandbox to help users understand and avoid malware threats and online scams.