topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Thursday March 28, 2024, 6:31 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: my solution to Virus Totaluploader  (Read 6942 times)

chashnniel

  • Member
  • Joined in 2018
  • **
  • default avatar
  • Posts: 127
    • View Profile
    • Donate to Member
my solution to Virus Totaluploader
« on: February 16, 2019, 07:20 AM »
I'm not a programer, but I like to handle some awesome program to solve my daily problems.

Virus Totaluploader seems to be discontinued, it still works like a charm but one thing annoy me a lot——it use the old VT but not the  new VT by default. and...
  • It seems the old VT  don't have reanalyze button
  • and the new VT has modernize UI and much better layout

so how can I upload files to the new VT? I tried to solve my problems in several hours.

what I need?

problems I got
  • can't get the HashTab's element through QuickMacro
(solved)
  • don't know how to insert # in texter's script mode
(solved)
  • don't  know how to make these three steps to one
(maybe you can help me)
[/list]

steps
  • analyze the new VT's URL structure
see pic VT_URL.png
  • In texter I can use https://www.virustotal.com/{#}/file/^v/detection{enter}
    ^v means paste, "\" is not work here, so you should use {#} instead!! (i found this by myself :D :D)
    also see pic texter.png. my hotstring is vt111 ;D
  • so the only problems is that how can i get the sha256 value (this time QuickMacro rocks)
        a. send alt-enter key(property)
        b. get the HashTab tab and click it
        c. get the sha256 listmenu and click it(there are many way to do this but i just show you the normal and fast way)
        d. send Cc(ctrl+c) key(copy it), this value used for the ^v in texter
    see it in pic QuickMacro.gif
    be careful you must set wait time(mine 1,1,0.5) in case of the delay

so my solution(without virus Totaluploader) is to select file in TC——click the quickmacro toolbar icon(to copy the hash)——tap vt111+tab in browser.
Anyone can decrease these three steps to one?? :-\

PS:actually you can add %P%N as paremeter for VTuploader(select file + click VTuploader in TC toolbar)

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 5,641
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #1 on: February 16, 2019, 07:08 PM »
2019-02-17 12_06_56-.png

VTC.ps1

Code: PowerShell [Select]
  1. <#
  2.   VTC (VirusTotalCheck)
  3.  
  4.   .\VTC.ps1 <file>
  5.  
  6. eg.
  7.   .\VTC.ps1 "Client Setup.exe"
  8. #>
  9.  
  10. Param (
  11.   [string]$infile
  12. )
  13. Start-Process "https://www.virustotal.com/#/file/$((Get-FileHash $infile).Hash)/detection"

Shortcut for SendTo:
Code: Text [Select]
  1. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\PoSh\VTC.ps1

Or just call it as:
Code: Text [Select]
  1. powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\PoSh\VTC.ps1 "<file>"

Edit the path to wherever you put it.
« Last Edit: February 16, 2019, 08:35 PM by 4wd »

chashnniel

  • Member
  • Joined in 2018
  • **
  • default avatar
  • Posts: 127
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #2 on: February 16, 2019, 10:43 PM »
thank you very much 4wd :Thmbsup: :Thmbsup:
it seems that I just make easy things difficult
that's exactly the difference between the amateur and professional :)

I run
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1"
in PowerShell(admin) but it can't add shortcut to sendto, it just open the VT url.

and I even tried to put the VTC.ps1 shortcut to the sendto folder but still doesn't work

powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1" "e:\Desktop\test\sdcds\noahinstaller.exe" works

am I missing something?

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 5,641
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #3 on: February 17, 2019, 06:04 AM »
I run
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1"
in PowerShell(admin) but it can't add shortcut to sendto, it just open the VT url.

You create a shortcut in the C:\Users\<user>\AppData\Roaming\Microsoft\Windows\SendTo folder with the above as the Target:

2019-02-17 23_01_53-VTC Properties.png

I've attached the shortcut.

Since you use TC you could just create a button to call it on the selected file:

powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1" "%P%N"

Or however it does it, (I don't use TC).

Just asking, do you have to wrap quotes around Chinese characters?
« Last Edit: February 17, 2019, 06:18 AM by 4wd »

chashnniel

  • Member
  • Joined in 2018
  • **
  • default avatar
  • Posts: 127
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #4 on: February 17, 2019, 07:56 AM »
Just asking, do you have to wrap quotes around Chinese characters?
thank you :up:
just test it, it works for shortcut whether I wrap quotes around Chinese characters or not :Thmbsup:

and I also test what you said about TC's usage.
It also works  in both two method.
(actually i add quotes just for guarantee)

chashnniel

  • Member
  • Joined in 2018
  • **
  • default avatar
  • Posts: 127
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #5 on: August 09, 2019, 11:49 PM »
@4wd

what's this?
aaa.pngmy solution to Virus Totaluploader
Thanks
« Last Edit: August 10, 2019, 12:14 AM by Deozaan, Reason: fixed invalid attachment »

Curt

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 7,566
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #6 on: August 10, 2019, 02:50 AM »
This thread is confusing me. The meaning of VT is to test any site or file BEFORE downloading anything, not to download and only then test. You have described what we use a locally installed anti-virus program for! But, again, it's much better to test before downloading.

What Internet browser are you using? Go to https://support.viru...5-Browser-Extensions and find your match!
For Chrome you can go straight to https://chrome.googl...aegfbieplglfidafgoka

But maybe I misunderstood the situation?
« Last Edit: August 10, 2019, 03:01 AM by Curt »

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 5,641
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #7 on: August 10, 2019, 06:26 AM »
what's this?
[ Invalid Attachment ]

Those four icons are inserted into all windows by DisplayFusion:
  • Resize window to 60% of the monitor in the lower right corner
  • Resize to 50% screen size, full height, right side
  • Next wallpaper for all monitors
  • Pin window as topmost

There are many more operations that can be pinned to a windows titlebar.

The meaning of VT is to test any site or file BEFORE downloading anything, not to download and only then test.

The meaning of VT is to test any file, not just before you download - that's why it has an upload file feature.

After all, how do expect to test a suspicious file that comes in via, for example, email, another computer on a network, a flash drive, etc, etc ?
« Last Edit: August 10, 2019, 06:35 AM by 4wd »

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 11,186
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #8 on: August 10, 2019, 06:42 AM »
You have described what we use a locally installed anti-virus program for! But, again, it's much better to test before downloading.

While you use the local virus tools for this VT lets you compare against a variety of virus tools instead of just one.

chashnniel

  • Member
  • Joined in 2018
  • **
  • default avatar
  • Posts: 127
    • View Profile
    • Donate to Member
Re: my solution to Virus Totaluploader
« Reply #9 on: August 10, 2019, 09:56 PM »
@4wd
thx
@curt
yeah, as 4wd said.