× Cookies are disabled! This site requires cookies to be enabled to work properly

VTzilla is a Mozilla Firefox browser plugin that simplifies the process of scanning Internet resources with VirusTotal. It allows you to download files directly with VirusTotal's web application prior to storing them in your PC. Moreover, it will not only scan files, but also URLs.

The scanning options are embedded in Firefox's context menu and download dialog, making the analysis process as easy as clicking a single button.

Enough! I am sick and tired of reading, just let me install the extension, I will figure out alone how it works.

Contents

Audience
Getting started
What are we interested in?
Scanning suspicious links
Scanning downloads before storing them
Scanning the web site being displayed
Search for a file or url report, a particular comment or a VirusTotal Community user

Audience

This document is intended for any user that wants to learn how to use VirusTotal's browser extension for Mozilla Firefox, VTzilla. No technical background is required in order to understand the document.

Thus, this document is intended for Mozilla Firefox users.

What are we interested in?

The main purpose of VTzilla is to help the community in securing their systems. Having said this, if we can also collect interesting data to analyse and study, even better.

We are interested in malware obviously, so if you come across any malicious file do not hesitate to scan it with VTzilla. Additionally, thanks to VirusTotal's URL scan service we hope that users will be willing to send us phishing and any other fraud/ecrime related sites. Why? Because hopefully these sites will end up being processed by the URL analysis tools integrated in VirusTotal and will improve their efficiency, and thus end-user protection.

Getting started

The first thing you must do is to install the addon itself, you can do this directly from the Mozilla Add-on store while visiting this it with Firefox:

Install VTzilla

When you click on the link Firefox may prevent our site from installing the software, simply add us us to your white list, we are good guys ;).

After installing the component you will have to restart Firefox to start making use of it, below you can find some examples of use.

Imagine you have logged into your Gmail account and you have received a suspicious email from your bank. The email is informing you about an unauthorized access to your account and is asking you to follow a link and provide your credentials to view the account access log.

Since you are a smart guy, you know that this email is probably a phishing case. Even though you know that this is a scam, you are committed to help others, hence, you right click on the suspicious link and select the Scan with VirusTotal option from the context menu:

This will open a new tab in the same browser window, such tab will show the report for the requested URL scan. Note that the scanning process will also download the file/site of the target link, so do not forget to click on the View downloaded file analysis link.

Scanning downloads before storing them

Let us suppose your good friend John Doe has sent you an email with a slide presentation. You know that very often these slides contain exploit code that will compromise your computer. When you click on the slide presentation in your webmail a download dialog appears, you are a cautious user, you therefore decide to scan the file first with VirusTotal:

Once you have checked the file, you will decide whether or not to download it to your PC. Note that VirusTotal is the one performing the download, the scan page displayed will be the analysis of the download URL and not of the file itself, so as to access the file scan you must click on the View downloaded file analysis link of the URL scan page.

Scan the web site being displayed

VTzilla adds its own toolbar to Firefox, one of the options in such toolbar is to scan the web site being displayed in the active browser window with VirusTotal. As before, a new tab will be opened with the scan report.

Search for a file or url report, a particular comment or a VirusTotal Community user

VTzilla's toolbar also embeds a search box in Firefox, this search box allows us to directly query VirusTotal's database for particular file/url reports, comment tags or VirusTotal Community users. When searching for file reports the box accepts MD5, SHA1 and SHA256 hashes.