Scanning bots check a link or a file before you open it: an attachment from an unknown sender, a shortened URL in a group, a script downloaded for a website. Sending it to the bot is faster than uploading to a website, and the bot can sit in a group and check what members post.
| # | Bot | Price | Languages | Inline | Groups | Score |
|---|---|---|---|---|---|---|
| 1 | @DrWebBot | Free | EN · RU · DE | no | yes | 83 |
| 2 | @PolySwarmBot | Free | EN | no | yes | 73 |
| 3 | @URLScanBot | Free | EN | no | no | 66 |
| 4 | @VirusTotal52bot | Free | MULTI | no | no | 63 |
| 5 | @easyantivirusbot | Free | RU | no | no | 57 |
Every bot received the same set: a known test malware file (EICAR), a fresh phishing link from a public feed, a clean PDF, a shortened link to a clean page and an infected PHP sample. We compared verdicts and detail, measured response time, checked whether the bot works in groups and how it handles files up to Telegram's size limit, and confirmed which engine the bot uses and whether it is official.
Dr.Web's bot uses the company's own engine, with the reliability of an official product and a clear verdict. Bots built on VirusTotal, like the unofficial @VirusTotal52bot and @easyantivirusbot, return results from dozens of engines at once, which catches more but also produces more false alarms on obscure files. Use both when a file matters: an official single-engine verdict and a multi-engine overview.
A link scanner checks where the URL leads and what the page does; urlscan.io goes furthest by loading the page and reporting requests, redirects and scripts. A file scanner needs the actual file, which means uploading it to the bot; do not do that with confidential documents, and remember that a clean scan of an encrypted archive says nothing about its contents. Password managers and 2FA bots are covered in a separate rating.
Dr.Web's bot works in groups: add it and it scans links and files members post.
No. New malware and encrypted archives can pass; treat a clean scan as one signal and keep your device's protection on.
urlscan.io loads the page and reports redirects, requests and scripts, not just a blocklist verdict.
The file is uploaded to the bot's servers; scan only files you would be comfortable sharing with a third party.