Threat Level: green Handler on Duty: Russ McRee

SANS ISC: VirusTotal VTzilla firefox/chrome plugin - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
VirusTotal VTzilla firefox/chrome plugin

If you are a frequent user of virustotal service, you might find useful as I did the firefox plugin they have to interact with their service. It allows to scan suspicious links, scan downloads before storing them, scan websites being displayed and search for a file/url report. Saves time to use their service.

Download it here. More information at http://www.virustotal.com/advanced.html#browser-addons

-- Manuel Humberto Santander Peláez | http://twitter.com/manuelsantander | http://manuel.santander.name | msantand at isc dot sans dot org

Manuel Humberto Santander Pelaacuteez

185 Posts
ISC Handler
Would this plugin be useful for users who are security-minded, but not real techy, to supplement their commercial AV product, say when going to a site that hasn't been evaluated by McAfee site advisor?
Julia

3 Posts
Looks like the virus total add-in isn't recognized by Mozilla as working with the current Firefox version.
GordonM

14 Posts
I actually suggested such an extension, using virustotal, on this very website in Feb 2008. MarkH@isc replied:

"They idea is certainly good, but there are a couple of challenges.
The number of malware hashes is a bit large. one of the other handlers had some stats, but in the last year the known new malware hashes was over 1 million. Storm at one stage was pumping out a newly packed file (ie differnt hash) every 2 minutes.

The other challenge might be that typically you'd have to download the file first. Which in some cases makes it to late.

That said there are a number of AV vendors that seem to be using this method and their detection rate for older stuff is really good, new, therefore no hash, not so."

I disagreed with this at the time - it wasn't supposed to be an end-all solution, but another brick in the wall.

Nice to see it taking off tho, every little helps. I like the URL scanning feature of this extension, very nice indeed.
lansalot

18 Posts

Sign Up for Free or Log In to start participating in the conversation!