Browser Extensions

Imagine you log  into your Gmail account and find a suspicious email from your bank. The email informs you about an unauthorized access to your account and asks you to follow a link and provide your credentials to view the account access log. Wouldn't it be great if you could simply right-click on the link and check it against VirusTotal in order to understand whether it is legit or report a phishing site? Wouldn't it be great if you could do this just with that right-click, without having to navigate to VirusTotal and refer to the URL tab? This is what VirusTotal's browser extensions allow you to do.

Google Chrome & Mozilla Firefox Browser Extension- VT4Browsers

Internet Explorer Browser Extension- vtExplorer 

 

Google Chrome & Mozilla Firefox Browser Extension- VT4Browsers

Check links and files with VirusTotal's free and easy service.

With VT4Browsers you will be able to use VirusTotal to analyze urls and files automatically. You can change the extension's behavior at any time. Feel free to try VT4Browsers:

Download and install

You can download and install the extension in Google's Chrome Web Store:

https://chrome.google.com/webstore/detail/efbjojhplkelaegfbieplglfidafgoka

Firefox users can install it through the Mozilla Add-on service:

https://addons.mozilla.org/en-US/firefox/addon/vt4browsers/ 

 

Scan suspicious links

Imagine you log into your Gmail account and find a suspicious email from your bank. The email is informing you about an unauthorized access to your account and is asking you to follow a link and provide your credentials to view the account access log.

Since you are savvy, you know that this email is probably a phishing scam. Even though you know that this is a scam, you are committed to helping others, so you right click on the suspicious link and select the Scan with VirusTotal option from the context menu.

This will open a new tab in the same browser window. This tab will show the report for the requested URL scan. Note that the scanning process will also download the file/site of the target link, so do not forget to click on the View downloaded file analysis link.

Scan downloads before storing them

Let us suppose your good friend John Doe has sent you an email with a slide presentation. You know that very often these slides contain exploit code that will compromise your computer. When you click on the slide presentation in your webmail, a download dialog appears.  You're a cautious user, so you decide to first scan the file with VirusTotal.  You’ve considered the fact that the the file will be shared with VirusTotal partners and premium customers, and are comfortable that the file content is appropriate for sharing.

Once you have checked the file, you will decide whether or not to download it to your computer.  To access the file report or URL report you must click on the links displayed in the VirusTotal balloon. Notice you can scan a download link and file simultaneously.

Search for a file or URL report, a particular comment, or a VirusTotal Community user

VT4Browsers' right click menu allows you to query VirusTotal's database directly for particular file/url reports, comment tags or VirusTotal Community users. When the search is for file or URL reports, the box accepts MD5, SHA1 and SHA256 hashes.

 

Customize the extensions options to your preferences

VT4Browsers is customizable so that you can decide what is sent to VirusTotal and how it's sent. You can send downloaded files and/or download URLs. The default settings are to send files and URLs that don't include documents and send anonymous passive DNS data.

If you prefer to have more control on what is sent, you can activate a prompt so that VT4Browsers asks your on each download if you want to send that specific download to VirusTotal.

You can also decide if you want to send Documents to VirusTotal. This is important because you should not send documents with sensitive information to VirusTotal.

Other option is to pause downloads when sending to VirusTotal. This option will tell the browser to pause any download while it's being sent to VirusTotal so that you can see the report before downloading the file to your computer. Please note that if you have this option activated, you will have to resume the download if you wish to continue with it or to cancel the download if you decide not to download it.

Last option is to send anonymous passive DNS data, which will allow to collect information about domains anonymously while you navigate through the Internet.

 

Internet Explorer Browser Extension

Download and install

Please note that you will need to install the extension under each user account with which you wish to use VirusTotal. You may download the extension installer directly from:

https://www.virustotal.com/static/bin/vtExplorer.exe

Scanning suspicious links

Imagine you log into your Gmail account and find a suspicious email from your bank. The email informs about an unauthorized access to your account and asks you to follow a link and provide your credentials to view the account access log.

Since you're savvy, you know that this mail is probably a phishing attempt. But you are also committed to helping others, so you right click on the suspicious link and select the Send URL to VirusTotal option from the context menu:

This will open a new Internet Explorer window, which will show the report for the requested URL scan. Note that the scanning process will also download the file or site of the target link, so don't forget to click on the View downloaded file analysis link.

Note that the link to scan doesn't necessarily have to be an HTML link anchor. It can also be plain text. Just select the text chain of interest and click the appropriate choice from the pull-down menu to send to VirusTotal:

This will scan the website being displayed.

VTexplorer adds its own icon to Internet Explorer's top bar. It allows you to scan the website being displayed in the active browser window with VirusTotal. As before, a new window will be opened with VirusTotal's report.