my solution to Virus Totaluploader

[chashnniel]

I'm not a programer, but I like to handle some awesome program to solve my daily problems.

Virus Totaluploader seems to be discontinued, it still works like a charm but one thing annoy me a lot——it use the old VT but not the  new VT by default. and...

• It seems the old VT  don't have reanalyze button
• and the new VT has modernize UI and much better layout

so how can I upload files to the new VT? I tried to solve my problems in several hours.

what I need?

• HashTab(free personal)
• QuickMacro(freemium)
• texter

problems I got

• can't get the HashTab's element through QuickMacro

(solved)

• don't know how to insert # in texter's script mode

(solved)

• don't  know how to make these three steps to one

(maybe you can help me)
[/list]

steps

• analyze the new VT's URL structure

see pic VT_URL.png

• In texter I can use https://www.virustotal.com/{#}/file/^v/detection{enter}
  ^v means paste, "\" is not work here, so you should use {#} instead!! (i found this by myself )
  also see pic texter.png. my hotstring is vt111
  
• so the only problems is that how can i get the sha256 value (this time QuickMacro rocks)
      a. send alt-enter key(property)
      b. get the HashTab tab and click it
      c. get the sha256 listmenu and click it(there are many way to do this but i just show you the normal and fast way)
      d. send Cc(ctrl+c) key(copy it), this value used for the ^v in texter
  see it in pic QuickMacro.gif
  be careful you must set wait time(mine 1,1,0.5) in case of the delay
  

so my solution(without virus Totaluploader) is to select file in TC——click the quickmacro toolbar icon(to copy the hash)——tap vt111+tab in browser.
Anyone can decrease these three steps to one??

PS:actually you can add %P%N as paremeter for VTuploader(select file + click VTuploader in TC toolbar)

[4wd]

VTC.ps1

Code: PowerShell [Select]

1. <#
2.   VTC (VirusTotalCheck)
3.  
4.   .\VTC.ps1 <file>
5.  
6. eg.
7.   .\VTC.ps1 "Client Setup.exe"
8. #>
9.  
10. Param (
11.   [string]$infile
12. )
13. Start-Process "https://www.virustotal.com/#/file/$((Get-FileHash $infile).Hash)/detection"

Shortcut for SendTo:

Code: Text [Select]

1. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\PoSh\VTC.ps1

Or just call it as:

Code: Text [Select]

1. powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\PoSh\VTC.ps1 "<file>"

Edit the path to wherever you put it.

[chashnniel]

thank you very much 4wd
it seems that I just make easy things difficult
that's exactly the difference between the amateur and professional

I run
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1"
in PowerShell(admin) but it can't add shortcut to sendto, it just open the VT url.

and I even tried to put the VTC.ps1 shortcut to the sendto folder but still doesn't work

powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1" "e:\Desktop\test\sdcds\noahinstaller.exe" works

am I missing something?

[4wd]

I run
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1"
in PowerShell(admin) but it can't add shortcut to sendto, it just open the VT url.

-chashnniel (February 16, 2019, 10:43 PM)

You create a shortcut in the C:\Users\<user>\AppData\Roaming\Microsoft\Windows\SendTo folder with the above as the Target:



I've attached the shortcut.

Since you use TC you could just create a button to call it on the selected file:

powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "e:\装机必备\VTC.ps1" "%P%N"

Or however it does it, (I don't use TC).

Just asking, do you have to wrap quotes around Chinese characters?

[chashnniel]

Just asking, do you have to wrap quotes around Chinese characters?

-4wd (February 17, 2019, 06:04 AM)

thank you
just test it, it works for shortcut whether I wrap quotes around Chinese characters or not

and I also test what you said about TC's usage.
It also works  in both two method.
(actually i add quotes just for guarantee)

[chashnniel]

@4wd

what's this?
my solution to Virus Totaluploader
Thanks

[Curt]

This thread is confusing me. The meaning of VT is to test any site or file BEFORE downloading anything, not to download and only then test. You have described what we use a locally installed anti-virus program for! But, again, it's much better to test before downloading.

What Internet browser are you using? Go to https://support.viru...5-Browser-Extensions and find your match!
For Chrome you can go straight to https://chrome.googl...aegfbieplglfidafgoka

But maybe I misunderstood the situation?

[4wd]

what's this?
[ Invalid Attachment ]

-chashnniel (August 09, 2019, 11:49 PM)

Those four icons are inserted into all windows by DisplayFusion:

• Resize window to 60% of the monitor in the lower right corner
• Resize to 50% screen size, full height, right side
• Next wallpaper for all monitors
• Pin window as topmost

There are many more operations that can be pinned to a windows titlebar.

The meaning of VT is to test any site or file BEFORE downloading anything, not to download and only then test.

-Curt (August 10, 2019, 02:50 AM)

The meaning of VT is to test any file, not just before you download - that's why it has an upload file feature.

After all, how do expect to test a suspicious file that comes in via, for example, email, another computer on a network, a flash drive, etc, etc ?

[wraith808]

You have described what we use a locally installed anti-virus program for! But, again, it's much better to test before downloading.

-Curt (August 10, 2019, 02:50 AM)

While you use the local virus tools for this VT lets you compare against a variety of virus tools instead of just one.

[chashnniel]

@4wd
thx
@curt
yeah, as 4wd said.