← All articles · 10 November 2026

How to use Scan File for Threats — practical guide

The tool performs a static analysis of a file to search for known malware signatures, including viruses and trojans. It also checks for active macros in Office documents and…

How to use Scan File for Threats — practical guide
Photo: Broken display glass (Unsplash).jpg · CC0 · Wikimedia Commons · Context illustration: FILE-O
Open this tool →

The tool performs a static analysis of a file to search for known malware signatures, including viruses and trojans. It also checks for active macros in Office documents and suspicious scripts that could be used for an attack. The final report will show an overall verdict and a list of detected threat indicators, helping you decide whether to open the file.

When this is useful

You are about to open an `act.docm` file received from an untrusted source in a messenger. Before launching it, you scan it and see a warning in the report about the presence of macros, a typical sign of a phishing campaign, and decide to delete the file. In another case, you downloaded a utility from a little-known website and scan it before installation. The tool finds no threats, giving you some confidence, but not a full guarantee.

Step-by-step instructions

  1. Select the suspicious file for upload by clicking the corresponding button on the tool's page.
  2. Wait for the scanning process to complete, which may take longer for large files.
  3. Review the final report: the scan status will be displayed at the very top.
  4. Scroll down the page to see details, such as a list of detected signatures or macro warnings.

How to verify the result

If the report shows a `Clean` status, it means no known signatures were found, but the file could still contain a new, unknown threat. Pay attention to warnings about macros or scripts, even if the main antivirus verdict is negative. If a scan error occurs, check if the file is corrupted or exceeds the 20 MiB size limit.

Important limitations

The scanner uses a database of known signatures and heuristics, so it cannot detect zero-day threats. The tool is not designed for checking websites or network traffic, only for uploaded files. It does not modify or disinfect infected files; it only provides a report. A negative scan result is not a safety certificate and does not replace a full-fledged antivirus solution with active protection.

All articles →