If you clean malware from your computer, or other computers, you invariably run into a file that you do not know whether it is malware or legitimate, and need to submit the file somewhere for analysis. An easy, and free, way to determine if it is malware is to submit the file to an online file scanning site like Jotti or VirusTotal. These sites then scan the file using many different commercial and non-commercial anti-malware scanners and display what each scanner responded with.
Sometimes, though, the scanning engines do not know the malware as it is to new. You can then submit these files to sites like the Bleeping Computer Malware Submission system or UploadMalware.com where these malware samples are analysed by the anti-malware community. Their findings and samples are then passed along to all the anti-virus vendors.
With that in mind I have put together a small program that allows you to submit a file for analysis to each of the sites or all of the sites at the same time in an easy manner. When you submit the file, depending on the flags you give to the program, it will launch instances of Internet Explorer to each service, automatically submit the file, and then display the results in IE. For those who hate IE, I wish I could add Firefox support but I could only figure out how to do it with IE.
This program is currently only a command-line program. What that means is there is no graphical interface. The nice thing about command-line programs, though, is that we can use them with the Windows Send To menu which is described below.
The syntax for the program is: submitter.exe
The available flags are:
| -j |
Submit only to Jotti |
| -v |
Submit only to VirusTotal |
| -b |
Submit only to BleepingComputer.com |
| -k |
Submit only to Kaspersky |
| -f |
Submit only to Fortinet |
| -u |
Submit only to UploadMalware.com |
| -jv |
Submit to both Jotti and VirusTotal |
| -all |
Submit to all services |
To run the program simply download it and save it somewhere in your path. Then you can run it on the command-line. An example of its use where we send a file to all of the supported services would be:
submitter -all C:\Windows\System32\ficqv.dll
The true power of this tool, IMHO, is when you add it to the Windows Send To context menu. The Windows Send To context menu allows you to right click on a file and send it to an application. So if you right-clicked on a file and sent it to the submitter, the submitter will automatically submit the file to the service(s) you have it configured for.
In order for this to work, you would need to open the SendTo folder which is located in your user profile like below:
C:\Documents and Settings\username\SendTo
Once that folder is open, simply right-click in the folder and create a new shortcut. When the wizard opens, browse to the submitter.exe file and select the Next button. Then give the shortcut a title and click on the Finish button. You will now see the new shortcut. You now need to add a flag to the Target line to tell the program what services it should submit to. Go into the shortcut’s properties and add one of the flags listed above. For new users I recommend using the -jv flag to submit to both Jotti and VirusTotal. To do this change the Target to:
submitter.exe -jv
The program can be downloaded from the following link:
File Multi-Submitter Download Link
Let me know if there are any problems or suggestions. If you know of any other single-file scanning services, please let me know, and I will add them to the submitter.
Tags: Jotti, VirusTotal, Security
Security news and information
