Breiseáin
SecondOpinion 1.0 Atosú de dhíth
le Thomas Schmid
This extension implements a convenient way to check and upload attachments against VirusTotal.com
![[Warning]](https://addons.thunderbird.net/static/img/developers/test-warning.png?b=0f17c866-6635205a)
Ceada
Maidir leis an mbreiseán seo
Integrates VirusTotal.com into Mozilla Thunderbird
Imagine the following scenario. You got a strange mail but your anti virus tells you it is safe. You are unsure about it. That's where this tools starts. It offers a convenient way to upload attachments to VirusTotal. VirusTotal will run your attachment through more than 50 anti-virus engines. The result is a strong indicator if the file is safe or not.
Please keep in mind, that his add-on is NOT an anti-virus replacement and never will be for various reasons. Checking a file with so many anti-virus needs time, it takes Virus Total several minutes to complete even for small files. It's not a real-time scanner, it an on demand service. And due to the enormous amount of scan engines the chances for false positives add up. So consider the the scan result as a profound indicator and a second opinion or second wall of defence in addition to your anti-virus.
As additional bonus VirusTotal keep track about well known dangerous files and stores this information in a public database. The add-on uses this public information and checks the attachments and urls on the fly against this database. This mechanism works very similar to a Phishing or Scram detection. Well known dangerous files do not need to be scanned, you get immediately an warning if the attachment is not considered trustworthy.
By design it can only check if a file is a dangerous and not if it's safe. So no warning does not mean safe. It works vice versa and will tell you if the file is known to be harmful.
There is a 4 request per minute quota with VirusTotal. Which means at the beginning you'll see an indicator displaying you are out of quota. This will get decrease dramatically the better the local cache is trained. The only option you have is to ignore that message.
Please report bugs via the issue tracker at github ( https://github.com/thsmi/SecondOpinion/issues ) or send an email to schmid-thomas at gmx.net
Imagine the following scenario. You got a strange mail but your anti virus tells you it is safe. You are unsure about it. That's where this tools starts. It offers a convenient way to upload attachments to VirusTotal. VirusTotal will run your attachment through more than 50 anti-virus engines. The result is a strong indicator if the file is safe or not.
Please keep in mind, that his add-on is NOT an anti-virus replacement and never will be for various reasons. Checking a file with so many anti-virus needs time, it takes Virus Total several minutes to complete even for small files. It's not a real-time scanner, it an on demand service. And due to the enormous amount of scan engines the chances for false positives add up. So consider the the scan result as a profound indicator and a second opinion or second wall of defence in addition to your anti-virus.
As additional bonus VirusTotal keep track about well known dangerous files and stores this information in a public database. The add-on uses this public information and checks the attachments and urls on the fly against this database. This mechanism works very similar to a Phishing or Scram detection. Well known dangerous files do not need to be scanned, you get immediately an warning if the attachment is not considered trustworthy.
By design it can only check if a file is a dangerous and not if it's safe. So no warning does not mean safe. It works vice versa and will tell you if the file is known to be harmful.
There is a 4 request per minute quota with VirusTotal. Which means at the beginning you'll see an indicator displaying you are out of quota. This will get decrease dramatically the better the local cache is trained. The only option you have is to ignore that message.
Please report bugs via the issue tracker at github ( https://github.com/thsmi/SecondOpinion/issues ) or send an email to schmid-thomas at gmx.net
