PHP library for VirusTotal.COM
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Izzy 316891d765
last plain API v2 version. Newer commits start moving to API v3
3 years ago add Contribution section to README 4 years ago
virustotal.class.php last plain API v2 version. Newer commits start moving to API v3 3 years ago


This is a PHP library for the VirusTotal.COM public API version 2.0. It's based upon the work of Adrian at As Adrian didn't include a license with his work, I didn't either (I cannot put part of his work under a license of my choice, after all).


  • PHP (of course; tested with 5.4) with CURL support.
  • an API key (available for free at the VirusTotal website)


Usage is pretty easy. Best demonstrated using an example:

$vt = new virustotal($apikey);
$res = $vt->checkFile($filename,$hash); // $hash is optional. Pass the $scan_id if you have it, or the file hash
switch($res) {
  case -99: // API limit exceeded
    // deal with it here – best by waiting a little before trying again :)
  case  -1: // an error occured
    // deal with it here
  case   0: // no results (yet) – but the file is already enqueued at VirusTotal
    $scan_id = $vt->getScanId();
    $json_response = $vt->getResponse();
  case   1: // results are available
    $json_response = $vt->getResponse();
  default : // you should not reach this point if you've placed the break before :)
// deal with the JSON response here

For details on the JSON response (both on enqueuing a file and when getting the final scan results), please consult the VirusTotal API documentation. For details on the PHP class in this repository, consult the code. You should find it well documented :)


You like this library and want to contribute?

  • Pull Requests are welcome!
  • Motivate me e.g. by sending me some mBTC to 1FsfvUGUpoPkLvJboKAnuBXHZ1zN3hbBL1 :)