Avast WEBforum

Other => General Topics => Topic started by: Hermite15 on August 11, 2010, 05:44:53 PM

Title: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 05:44:53 PM
Quote
What is VTzilla?

VTzilla is a Mozilla Firefox browser plugin that simplifies the process of scanning Internet resources with VirusTotal. It allows you to download files directly with VirusTotal's web application prior to storing them in your PC. Moreover, it will not only scan files, but also URLs.

The scanning options are embedded in Firefox's context menu and download dialog, making the analysis process as easy as clicking a single button.
http://www.virustotal.com/advanced.html#browser-addons
http://virustotal.hispasecsistemas.netdna-cdn.com/progs/vtzilla.xpi

Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: polonus on August 11, 2010, 05:53:14 PM
Hi Logos,

Merci bien, and installed,

pol
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 06:00:19 PM
depending on how many users will install it, I'm wondering if their servers will hold the load :D (while the add-on is being used).
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 06:06:46 PM
Thanks, I have the standalone VT Uploader which gives easy access to scan suspect files using the windows right click menu, but that one doesn't have URL scan options.

I guess only time will tell if they can stand the load as if you can remember when the added URL scanning in the usual VT site it wasn't very long lived before it was withdrawn.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: polonus on August 11, 2010, 06:13:12 PM
Hi Logos,

That also depends on who will read your thread here ;D
I think it is not on the official Fx add-on listing, so you have to know where it resides,
and I certainly will refrain from abuse!
I think 40 scans as your maximum daily access will hold.
Similar method I use for the online iFrame scanner,
it is hosted by a private coder
and abuse could make we loose it as an essential asset in the malware fight,
so restricting yourself in these respects pays off always in the end,

Damian

Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 06:26:49 PM
I tried a couple of tests, one failed to be scanned, the other on a forum topic has completed and it isn't the same as the standard VT scan, http://www.virustotal.com/url-scan/report.html?id=90f15fbca48b015959a9c143ecc82b25-1281536528 (http://www.virustotal.com/url-scan/report.html?id=90f15fbca48b015959a9c143ecc82b25-1281536528).
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: polonus on August 11, 2010, 06:30:01 PM
Hi DavidR,

Good work, maybe that was why it did not make the official Firefox plug/in list. Shall we continue to recommend it or shall we give it with caution,

polonus
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 06:33:45 PM
@ David: your results are displayed differently because you sent a site address, not a file to download; this said they could have spared the use of Firefox, as FF uses Google safe browsing ;D

@ Polonus: I think it's interesting, it's a 1.0 version. Time will tell if Mozilla wants to list it or not. I don't consider the add-on pages of Firefox an absolute reference anyway.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Lisandro on August 11, 2010, 06:38:40 PM
The url scanning should have other antivirus scanners to be useful. For instance, Avira web guard and, of course, Web Shield of avast.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 06:42:19 PM
there are two pages to view:
for the link:
http://www.virustotal.com/url-scan/report.html?id=90f15fbca48b015959a9c143ecc82b25-1281536528
for what's downloaded, whatever it is, there's a button
http://www.virustotal.com/file-scan/report.html?id=1b8ee079d41e68f76f85415fabba71370391dbb820ee2f2d32b7e5d32a090cda-1281543731

edit: I'm trying to get Firefox (the download) scanned >>> it's taking ages...still queued

Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 06:50:59 PM
I think the add-on was released yesterday, let's give them some time, the idea is good. It just seems to be insisting on scanning a site first, even if you only indicate a download link.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: spg SCOTT on August 11, 2010, 07:55:04 PM
Glad that they brought the site scanning back (even in that short time it was here, it looked to be a good thing)

I have only one issue with the addon...you cannot highlight text and right click to check, which can be slightly awkward when checking links here (hXXp...) but that is not important at all...
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 08:15:45 PM
@ David: your results are displayed differently because you sent a site address, not a file to download; this said they could have spared the use of Firefox, as FF uses Google safe browsing ;D

Yes it is and that is because I was testing what I needed, URL submission, but I was expecting more an actual scan rather than interrogation of historic databases to see if the URL was on one or more suspect lists, etc.

If the file is on-line like your example that really is no different to a site address as the home page index.html, etc. is also a file, so it will be interesting to see what the results are of your firefox installation file scan are.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: spg SCOTT on August 11, 2010, 08:18:10 PM
Yes it is and that is because I was testing what I needed, URL submission, but I was expecting more an actual scan rather than interrogation of historic databases to see if the URL was on one or more suspect lists, etc.

If you click on the link that is highlighted in Logos' first image, it checks the site against the 41 scanners...

As you can see here: http://forum.avast.com/index.php?topic=62719.0

Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 08:22:50 PM
Yes it is and that is because I was testing what I needed, URL submission, but I was expecting more an actual scan rather than interrogation of historic databases to see if the URL was on one or more suspect lists, etc.

If you click on the link that is highlighted in Logos' first image, it checks the site against the 41 scanners...

As you can see here: http://forum.avast.com/index.php?topic=62719.0



yes, that's what I was gonna say ;) otherwise, for the Firefox installer scan I gave up, the wait was too long...that's the second day since this service is online, so I'm not going to complain. They will improve it I'm sure.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 08:37:17 PM
Well I don't know if there is some sort of limit in the file size like there is if you upload a file in the conventional scan, I think that is 15MB.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 09:08:45 PM
wasn't that, my file was queued, scan didn't even start...
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: spg SCOTT on August 11, 2010, 09:12:36 PM
I think there is something that you need to allow in NoScript I think...can't quite remember...not at a pc...
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 09:14:21 PM
I think there is something that you need to allow in NoScript I think...can't quite remember...not at a pc...

could be, there was something I didn't allow...will check...

edit: okay, it was that ;) netdna-cdn.com has to be allowed, then you get the result instantly as FF.exe has been scanned in the past :D
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 09:20:43 PM
okay works really fine now 8) here's an example with Psi IM:
http://www.virustotal.com/url-scan/report.html?id=3040b01e60df65525bf61d6fa9d13bca-1281547070
http://www.virustotal.com/file-scan/report.html?id=f00a8299522079df75aff46153571fbe42358e11cfe7bbefb0fc7f2e81d86150-1281554285

McAfee-GW (what's GW?) finds it suspicious  ::)
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 09:29:40 PM
Well there are certainly some anomalies as I tried to right click on a link to a .pdf file and it did a site check rather than scanned the file, http://www.virustotal.com/url-scan/report.html?id=a9f325b9d562f45ade20769476125b26-1281547540 (http://www.virustotal.com/url-scan/report.html?id=a9f325b9d562f45ade20769476125b26-1281547540).
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 11, 2010, 09:34:33 PM
Well there are certainly some anomalies as I tried to right click on a link to a .pdf file and it did a site check rather than scanned the file, http://www.virustotal.com/url-scan/report.html?id=a9f325b9d562f45ade20769476125b26-1281547540 (http://www.virustotal.com/url-scan/report.html?id=a9f325b9d562f45ade20769476125b26-1281547540).

you always get the corresponding site check first, that's normal, then click on the download analysis button.

http://www.virustotal.com/file-scan/report.html?id=d0ab25ef7098bd1a6b6da3a0f8ea577553edc93dd8d33dcc546c164e96a7b29e-1281554761
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 11, 2010, 09:46:28 PM
Thanks Logos, I wasn't looking at the pre-amble stuff, but just the results.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 12, 2010, 02:02:42 AM
hey guys, there's a VirusTotal toolbar I see now that I have upgraded to FF 4.0 b3 and didn't see on b2 ??? might have been a bug on b2 preventing it from being displayed ??? ;D
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Lisandro on August 12, 2010, 03:19:53 AM
The toolbar is there on FF version 3 also.
But I can't see why should we lose such a screen space. You can have access by the context menu (much better).
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 12, 2010, 03:55:41 AM
Then do what I do and uncheck the toolbar and it isn't displayed. I just use the right click function. If you happenm to need the other options temporarily enable the toolbar.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Lisandro on August 12, 2010, 01:38:21 PM
Then do what I do and uncheck the toolbar and it isn't displayed. I just use the right click function. If you happenm to need the other options temporarily enable the toolbar.
Sure... Any decent toolbar could be disabled...
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 12, 2010, 03:53:00 PM
Then there is no problem then, no loss of screen space.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Lisandro on August 12, 2010, 04:00:57 PM
Then there is no problem then, no loss of screen space.
Sure. I was just saying that I saw no reason to let the toolbar on.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: DavidR on August 12, 2010, 04:29:48 PM
Well the toolbar providers other options in those two buttons that aren't in the right click menu.
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 12, 2010, 04:42:19 PM
Well the toolbar providers other options in those two buttons that aren't in the right click menu.

you also got a "virus total option" in the dialog before downloading ;) and what's nice is that the dialog doesn't close when you click on "scan..." 8)
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Asyn on August 13, 2010, 01:20:31 AM
Thanks Logos..!
Nice little gadget. :)
asyn
Title: Re: VTZILLA 1.0 >>> Virus Total add-on for Firefox
Post by: Hermite15 on August 13, 2010, 10:47:22 AM
Thanks Logos..!
Nice little gadget. :)
asyn


hmm...more then a gadget...but you're welcome ;)