Free Virus Check
निःशुल्क भाइरस जाँच
Is this file a virus? Check it free - without uploading it
Got an APK, PDF, Word file or ZIP on WhatsApp, Viber or email and not sure it is safe? Choose it below. We do two checks:
- Look inside the file for the tricks malicious files use - a "PDF" that is really a program, hidden scripts and auto-run actions in PDFs, macros in Word and Excel files, programs hidden in ZIP files, and links to suspicious websites. This works for every file, including ones no one has seen before.
- Look up its fingerprint (a SHA-256 hash) in VirusTotal, a free service that checks files against more than 70 antivirus engines - useful for files that are already circulating.
Your file never leaves your device. Both checks run inside your browser. Only the fingerprint - a string of letters and numbers that cannot be turned back into your file - is sent to VirusTotal, and only when you press that button.
Web addresses this file links to - check any you don't recognise with our link checker before clicking them in the file:
This inspection finds common warning signs, not every threat - it can't see inside encrypted or heavily compressed parts of a file. Use it together with the VirusTotal check.
Most useful for apps, programs and files that are being forwarded around. Your own receipts, letters and photos will usually show "Item not found" - that's normal, and step 2 above is the check that matters for them.
If VirusTotal says "Item not found": nobody has ever checked this exact file there before. That is normal for personal documents, photos and new files - it does not mean the file is safe or unsafe. For an APK or program you received from a stranger, treat "not found" as a reason to be careful, and don't install it. You can upload a non-private file for a full scan at virustotal.com - never upload personal documents, ID scans or bank statements.
How to read the result
Inside-the-file check
Red warnings (a disguised program, auto-run scripts, macros, programs inside a ZIP) - don't open it. Ask the sender by phone whether they really sent it.
Orange cautions (links inside a PDF, a lure-style file name) - common in genuine files too. Only continue if you were expecting the file, and check any links first.
No warning signs - a good sign, but not a guarantee. Still only open files you were expecting.
VirusTotal check
Several engines say "malicious" or "trojan" - delete the file. Do not open or install it. If you already opened it, see "If you already opened it" below.
One or two engines flag it - treat it as suspicious. Ask the sender (by phone, not by replying) whether they really sent it.
"Item not found" - VirusTotal has never seen this exact file. That does not mean it is safe: new scam files are often unknown. Be extra careful with APK files - a genuine app comes from the Play Store, not a chat message.
0 detections on a file seen many times - a good sign, but still only open files you were expecting from people you know.
Want a full scan of a file VirusTotal hasn't seen? You can upload it yourself at virustotal.com. But files uploaded there can be seen by security researchers worldwide - never upload personal documents, citizenship or passport scans, bank statements or anything private.
Files that should always make you suspicious
- .apk files sent on WhatsApp, Viber or Messenger - "bank update", "wedding invitation", "photo album", "traffic fine". This is how phone-stealing malware spreads in Nepal.
- .exe, .scr, .bat, .js, .vbs - programs, not documents. A real invoice or CV is never an .exe.
- Double extensions such as
result.pdf.exeorphoto.jpg.apk. - Password-protected ZIP files from strangers - the password stops antivirus from looking inside.
- Office files that ask you to "Enable content" or "Enable macros" to see the document.
If you already opened or installed it
- Disconnect from the internet (turn off mobile data and Wi-Fi).
- Uninstall the app (Settings › Apps). If it won't uninstall, it may have taken "device admin" rights - remove those in Settings › Security first.
- From a different, clean device, change your passwords for email, Facebook and banking, and turn on two-step verification.
- Call your bank or wallet provider if you use mobile banking on that phone, and watch your account for unknown transactions.
- If money was taken, report it to the Cyber Bureau.
Already lost money or been hacked?
Call your bank or wallet provider immediately to block the account, then report it to the Nepal Police Cyber Bureau. Our step-by-step reporting guide lists what evidence to keep and who to contact.
More free tools and guides
Free toolSuspicious Link Checkerशंकास्पद लिङ्क जाँचSpot fake eSewa, Khalti, bank and Facebook links before you tap.Free toolPassword Strength & Leak Checkपासवर्ड बलियो छ कि छैनSee how strong a password is and whether it has leaked online.Free toolEmail Breach Checkईमेल चुहावट जाँचFind out if your email address was leaked in a data breach.Free toolSpot the Scam Quizठगी चिन्नुहोस् - क्विज8 real-style messages from Nepal. Can you tell which are scams?GuideCommon Online Scams in Nepalनेपालमा हुने अनलाइन ठगीWallet KYC, fake jobs abroad, lottery, hacked Messenger and more.GuideHow to Report Cybercrime in Nepalसाइबर अपराधको उजुरी कसरी दिनेWhat to do first, what evidence to keep and where to complain.GuideSecurity & Responsible Disclosureसुरक्षा नीतिFound a security problem on our website? Here is how to tell us.
This Cyber Safety Centre is a free public-awareness service of Shrijanshil Nepal, a non-profit organization in Nepal. The tools give guidance, not a guarantee - no checker can prove that a file or link is safe.