Blog VirusTotal

LapSec

Hispasec has just created LapSec. It is a freeware tool to secure Windows laptops. (We know, nothing to do with Virustotal, but just to let you know). Hope it turns out to be useful.

VirusTotal Google Chrome browser extension a.k.a. VTchromizer

We have just coded a Google Chrome browser extension to interact with VirusTotal. The extension adds an option to the context menu to analyze links with VirusTotal's URL analysis engine.

Unlike the VTzilla Firefox extension, it does not embed an additional "Scan with VirusTotal" option in the browser's file download dialog (mainly because Chrome's API does not allow to do so). Having said this, it does include a top menu bar popup that enables quick VirusTotal searches and direct submission of the page being viewed to VirusTotal.

You may find more information (including the download links) about both VTchromizer and VTzilla here: VirusTotal browser extensions

Extra metadata field: ExifTool

We've added ExifTool results in the VT reports. It shows lots of internal information about some types of files, and it is specially interesting in image and document types. Thanks Phil Harvey for letting us use this nice tool here.

Report URLs feature

Now when you check a static URL report, if there's a more recent report about that specific sample, you will be able to see it in the head of the report with this form: There is a more up-to-date report (N/M) for this file. That message will also be a link where you'll be able to visit that more recent report. Thanks Lucian for the suggestion :)

VirusTotal += SUPERAntiSpyware

We've just added the SUPERAntiSpyware engine from the homonymous company, based on USA. Primarily focused on Spyware handling, it also detects other kinds of malware. I would like to thank Mr. Skrepetos for making integration at VirusTotal a seamless task.

About Symantec's Suspicious.Insight

Some days ago we've included a new version of the Symantec engine that makes use of the company reputation-based security technology. Given that we've received a lot of emails asking about the matter, we think it is interesting to clarify it, and Symantec guys have posted a quite enlightening entry in this blog: "So what exactly is a Suspicious.Insight detection? These detections are derived from Symantec’s new reputation-based security technology. They highlight files that have not yet developed a strong reputation (either good or bad) amongst Symantec’s community of users." To read more about it, visit the Symantec's blog post or the reference about the detection.