Submitting malware samples to all vendors helps protect nearly all Internet users.
This article contains a list of every respectable Windows anti-malware vendor, with a signature based product, that I am aware of. Thus this list, in addition to showing you how to easily submit malware or false positives to all of them, also serves as a reference for anti-malware products which are confirmed to be legitimate.
That said, I make no statement as to whether any particular anti-malware vendor is good at detecting malware. By submitting malware to all of them, you can help protect nearly all internet users, regardless of which product they choose to use for protection.
In addition, please read the section about How You Can Help if you are knowledgeable about anti-malware vendors, or if you find something missing or incorrect in this list.
Index
1. How to Easily Prepare to Submit the Samples
A. Make Sure an Email Client Is Set Up Properly
B. Put Samples in Compressed Files
2. Easily Submit Malware to All Vendors
3. Criteria Used for the List
4. List of All Vendors
5. How You Can Help
1. How To Easily Prepare To Submit The Samples
A. Make Sure an Email Client Is Set Up Properly
To follow the advice in this article, you will need to have an email client, such as Thunderbird or Outlook, set up and configured. If you have not already set this up, please do so now. For instructions on how to set up Outlook, please see this page; and for instructions on how to set up Thunderbird, please see this page.
You will also have to be using an email service which has been confirmed to work for this process. The only one that I am currently aware of is AOL.
By the way, I have confirmed that Gmail, Yahoo, Hotmail, GMX, and FastMail do not work.
In terms of the ones that do work, please note that sometimes they will force you to answer a puzzle to prove that you are human, or even to change your password. This is because it seems like what you’re doing constitutes unusual account activity. This is not really a problem. I’m just letting you know ahead of time so you’re not surprised.
B. Put Samples In Compressed Files
If you’re planning on submitting a suspicious file, or multiple files, for analysis, the easiest way to do this is to install a program called 7-Zip. Once it’s installed, right click on the sample you would like to submit and select “7-Zip”. If you are submitting multiple samples, highlight all and right click on them, then choose “7-Zip”. Submitting multiple samples at once can save you a lot of time if you have a lot of samples to submit. However, I would suggest that you do not submit more than 5 at a time as some vendors will begin to reject the samples.
After selecting “7-Zip”, choose “Add to archive…” from the context menu. It will open up a window. In the option for “Archive format”, make sure it is set to zip. Enter “infected” (without the quotes) as the password, then select OK. Now you should have the samples in a password protected zip file.
2. Easily Submit Malware To All Vendors
One of the main purposes of this article is to make it as easy as possible for anyone who comes across malware to submit it to all security vendors in as few steps as possible. Also, don’t worry about duplicate submissions. This has been taken care of for this list.
You can submit the password protected zip file by clicking on this link. (Attach the zip file after the email client opens and then click Send). Webmail users should right click on it and choose to save the email addresses. Then paste them in the contact line of your email.
If the email is not delivered correctly, please see my comments in Section (1)(A) to make sure that you are not using one of the email services which do not work with this list.
At this point, you’ve submitted the samples to all vendors below marked with a V . This does include most of them. Also, if a message failed to be delivered to one or more of the vendors, which does happen sometimes, you can manually submit it to them if you like. Also, if you wish, you can submit the samples to the rest of the vendors who have submission information. Each of these vendors is marked with a A . However, this will be much more time consuming as you will have to manually submit the samples to each vendor individually. Note that for online forms, unless instructed otherwise, you should upload the file directly and not in a compressed file.
3. Criteria Used for the List
My only criteria for adding vendors to this list are that they have to have their own website, which must provide contact information. Also, the vendors must have a signature based anti-malware product, not have a bad reputation, and their main site cannot be rated orange or red by Web Of Trust – which is a criterion imposed by Gizmo’s Best.
If I say that I have confirmed something in the list, it means that I have either been provided with that information directly from the vendor or from some other official source with connections to the vendor. The only way it can be incorrect is that the vendor now provides a particular submission option which they previously did not.
4. List of All Vendors
Unless otherwise noted, when submitting a sample via an online form you should upload the file directly and not in a compressed file. Also, unless otherwise noted, submissions by email should be put in a password protected zip file. Just click on the link for the vendor you wish to submit it to and it will automatically fill the necessary details into your default email client. Then all you need to do is to attach the zip file and click Send. In any cases where the vendors require different steps, they are clearly noted.
V This symbol denotes the vendors who have been included in the mailing lists in Section 2 above.
A This symbol denotes the vendors who have alternate options for submitting samples, as they do not have an email address for submission.
O This symbol denotes the vendors who use the signatures of other vendors. Thus you don’t need to submit samples to them directly.
* This symbol means that there is incomplete information. If you have any information, your assistance would be greatly appreciated.
If a vendor is unmarked, this indicates that I currently have no information about how to submit malware to them.
The vendors are arranged alphabetically in this list. To jump to the vendor you’re interested in, please click on the initial letter of the vendor’s name below.
A B C D E F G H I K L M N P Q R S T U V W X Z
Please note that some products are known by multiple names. Thus, if you are having trouble finding a particular vendor, or product, it will likely be very helpful to search for them using Ctrl-F.
Vendor | Submit Malware | Submit False Positives |
---|---|---|
V AegisLab | Report Malware via Email | I have confirmed that there is no online false positive submission form |
V AhnLab | Registered users can report malware via the options on this page
or anyone can Report Malware via Email |
Registered users can report false positives via the options on this page
or anyone can Report False Positive via Email |
* Antiy | The online malware submission form linked to on their site does not currently work. | I have found no online false positive submission form I have found no working email address for submitting false positives |
ArcaVir / Arcabit
HomePage (Polish) |
I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
O Ashampoo | Submit malware to Emsisoft and Bitdefender as Ashampoo uses the same signatures | Submit false positives to Emsisoft and Bitdefender as Ashampoo uses the same signatures |
O Auslogics | Submit malware to BitDefender as Auslogics uses the same signatures | Submit false positives to BitDefender as Auslogics uses the same signatures |
Avast | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
A * AVG | Online Malware Submission
I have found no working email address for submitting malware |
Online False Positive Submission |
O
AVZ
HomePage (Russian) |
Submit malware to Kaspersky as AVZ uses the same signatures | Submit false positives to Kaspersky as AVZ uses the same signatures |
V Avira AntiVir | Online Malware Submission
or |
Online False Positive Submission
I have confirmed that there is no email address for submitting false positives |
V BitDefender | Online Malware Submission (Select “False Negative” and check the box for file)
or anyone can Report Malware via Email |
Online False Positive Submission (Select “False Positive” and check the box for file)
or anyone can Report False Positive via Email |
* Bkav | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
V * BluePoint Security | I have confirmed that there is no online malware submission form | I have found no online false positive submission form |
O BullGuard | Submit malware to BitDefender as BullGuard uses the same signatures | Submit malware to BitDefender as BullGuard uses the same signatures |
A Celframe | I have confirmed that there is no email address for submitting malware | I have confirmed that there is no email address for submitting false positives |
* CMC | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
A Comodo | Online Malware Submission | Online False Positive Submission |
O Constant Guard/xfinity | Submit malware to Symantec as Constant Guard uses the same signatures | Submit false positives to Symantec as Constant Guard uses the same signatures |
Crystal Security | I have confirmed that there is no online malware submission form
I have confirmed that there is no email address for submitting malware |
I have confirmed that there is no online false positive submission form
I have confirmed that there is no email address for submitting false positives |
O Cyberoam | Submit malware to Avira as Cyberoam uses the same signatures | Submit false positives to Avira as Cyberoam uses the same signatures |
V * Defenx | I have confirmed that there is no online malware submission form
I have found no working email address for submitting malware |
I have found no online false positive submission form
I have found no working email address for submitting malware |
A Digital Defender | Online Malware Submission | I have found no online false positive submission form I have found no working email address for submitting false positives |
V Dr. Web | Report Malware via Email | Online False Positive Submission
or |
V Emco | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
V Emsisoft | Online Malware Submission
or |
Report False Positive via Email |
V eScan | Online Malware Submission (Select “Submit a Ticket” and then Samples)
or |
Online False Positive Submission (Select “Submit a Ticket” and then “False Positive”)
or |
O Faronics | Submit malware to Vipre as Faronics uses the same signatures | I have confirmed that there is no online false positive submission form |
V Fortinet/FortiGuard | Online Malware Submission (can only upload up to 1 MB)
or |
I have confirmed that there is no online false positive submission form |
V FortKnox SpyEmergency/Netgate | Report Malware via Email | Report False Positive via Email |
V F-Prot/FRISK | Online Malware Submission
or |
Online False Positive Submission
or |
FSB Antivirus | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
A F-Secure | Online Malware Submission
I have confirmed that there is no email address for submitting false positives |
Online False Positive Submission
I have confirmed that there is no email address for submitting false positives |
A G Data | Online Malware Submission
I have confirmed that there is no email address for submitting false positives |
Online False Positive Submission
I have confirmed that there is no email address for submitting false positives |
herdProtect | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
O Hitman Pro | Submit malware to BitDefender, Kaspersky, and Emsisoft as Hitman Pro uses the same signatures | Submit false positives to BitDefender, Kaspersky, and Emsisoft as Hitman Pro uses the same signatures |
V Ikarus | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
V Immunet Protect | Report Malware via Email | Online False Positive Submission (Select “Submit a false positive” from the drop-down menu)
or |
Iolo | I have found no online malware submission form
I have found no working email address for submitting malware |
I have found no online false positive submission form
I have found no working email address for submitting false positives |
V K7 | I have confirmed that there is no online malware submission form
I have found no working email address for submitting malware as that stated in website does not work |
I have confirmed that there is no online false positive submission form |
V Kaspersky | Online Malware Submission (requires free account)
or |
Online False Positive Submission (requires free account)
or |
V
*
KV Antivirus/Jiangmin
HomePage (Chinese) |
I have found no online malware submission form | I have found no online false positive submission form |
V Lavasoft Ad-Aware | Online Malware Submission
or |
Online False Positive Submission
or |
O Lumension | Submit malware to Norman as Lumension uses the same signatures | Submit false positives to Norman as Lumension uses the same signatures |
A Malwarebytes | You have to join their forum and post malware samples here
I have confirmed that there is no email address for submitting malware |
You have to join their forum and post false positives here
I have confirmed that there is no email address for submitting false positives |
V McAfee | Online malware submission is available to registered users through this page
or anyone can Report Malware via Email |
Online false positive submission is available to registered users through this page
or send an email to anyone to this email address or if is marked as marked as “McAfee-GW-Edition” submit it to this email address |
A Microsoft Security Essentials | Online Malware Submission | Online False Positive Submission |
V
*
MKS
HomePage (Polish) |
Report Malware via Email | I have found no online false positive submission form
I have found no working email address for submitting false positives |
O Moon Secure | Submit malware to Immunet Protect as Moon Secure uses the same signatures | Submit false positives to Immunet Protect as Moon Secure uses the same signatures |
O MSecure | Submit malware to Ikarus as MSecure uses the same signatures | Submit false positives to Ikarus as MSecure uses the same signatures |
V Nod32/ESET | Report Malware via Email | Report false positives through the program itself
or |
V NoraScan | Report Malware via Email | Report False Positive via Email |
V nProtect | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
V Panda | Online Malware Submission
or |
Online False Positive Submission
or |
V * Preventon | I have found no online malware submission form | I have found no online false positive submission form |
A * Protector Plus/Proland | The online malware submission provided on their site doesn’t work correctly.
The email address provided on their site doesn’t work correctly. |
I have found no online false positive submission form
I have found no working email address for submitting false positives |
PSafe | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
A Quick Heal | Report Malware via Email | I have confirmed that there is no email address for submitting false positives |
*
Rising
HomePage (Chinese) |
There is no suitable online form for submitting malware as theirs is rated red by WOT
I have confirmed that there is no email address for submitting malware |
There is no suitable online form for submitting false positives as theirs is rated red by WOT
I have confirmed that there is no email address for submitting false positives |
A * Roboscan/ALYac | Report malware through tool downloaded from this page
I have found no working email address for submitting malware |
I have found no online false positive submission form
I have found no working email address for submitting false positives |
Rubus / Ozone Antivirus | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
O ShawSecure | Submit malware to McAfee as Shaw Secure uses the same signatures | Submit false positives to McAfee as Shaw Secure uses the same signatures |
V * SmartCOP |
I have confirmed that there is no online malware submission form |
I have found no online false positive submission form |
V Sophos | Online Malware Submission
or |
Online False Positive Submission
or |
V Spybot Search & Destroy | Online Malware Submission
or |
Online False Positive Submission (Make sure to let them know it’s a false positive)
or |
SpyCop | I have found no online malware submission form
I have found no working email address for submitting malware |
I have found no online false positive submission form
I have found no working email address for submitting false positives |
V * SRN/Solo Antivirus | I have found no online malware submission form | I have found no online false positive submission form |
A SuperAntiSpyware | Report malware through tool on this page
I have confirmed that there is no email address for submitting malware |
Report false positives through SuperAntiSpyware program interface
I have confirmed that there is no email address for submitting false positives |
V Symantec/Norton | Report Malware via Email | I have confirmed that there is no email address for submitting false positives |
V thirtyseven4 | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
Total Defense | I have found no online malware submission form I have found no working email address for submitting malware |
I have found no online false positive submission form I have found no working email address for submitting false positives |
A Trend Micro | Report Malware via Email (Note that the password must be virus) | Online False Positive Submission (Attach the password protected zip file and tell them the password in the comments section)
I have confirmed that there is no official email address suitable for submitting false positives |
V Trojan Remover/Simply Super Software | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
O TrustPort | Submit malware to AVG, BitDefender, Dr. Web, Vipre, and VirusBlokAda as TrustPort uses the same signatures | I have confirmed that there is no online false positive submission form |
V Twister/Filseclab | I have confirmed that there is no online malware submission form | I have confirmed that there is no online false positive submission form |
O Untangle | Submit malware to Immunet Protect as Untangle uses the same signatures | Submit false positives to Immunet Protect as Untangle uses the same signatures |
O Verizon Internet Security | Submit malware to McAfee as Verizon Internet Security uses the same signatures | Submit malware to McAfee as Verizon Internet Security uses the same signatures |
V Vipre/Sunbelt/Threattrack | Online Malware Submission
or |
Online False Positive Submission
or |
A Vir.IT | Online Malware Submission
I have confirmed that there is no email address for submitting malware |
Online False Positive Submission (Select “Analysis Required” and write “Possible False Positive” in the Description box)
I have confirmed that there is no email address for submitting false positives |
V VirusBlokAda/VBA32 | Online Malware Submission (Translate page from Russian)
or |
I have confirmed that there is no online false positive submission form |
O VIRUSfighter | Submit malware to Sophos as VIRUSfighter uses the same signatures | Submit false positives to Sophos as VIRUSfighter uses the same signatures |
VirusKeeper | I have found no online malware submission form
I have found no working email address for submitting malware |
I have found no online false positive submission form
I have found no working email address for submitting false positives |
A Webroot | Online Malware Submission
I have confirmed that there is no email address for submitting malware |
False positive submission is available to through this page
or |
V XVirus | You can post malware samples here
or |
You can post false positives here |
O Zemana | Submit malware to Emsisoft, G Data, Ikarus, and Dr. Web as Zemana uses the same signatures | Submit false positives to Emsisoft, G Data, Ikarus, or Dr. Web as Zemana uses the same signatures |
V
Zillya
HomePage (Ukrainian) |
I have found no online malware submission form | I have found no online false positive submission form |
O ZoneAlarm/Check Point | Submit malware to Kaspersky as ZoneAlarm uses the same signatures | Submit false positives to Kaspersky as ZoneAlarm uses the same signatures |
Zoner | I have confirmed that there is no email address for submitting malware | I have confirmed that there is no online false positive submission form
I have confirmed that there is no email address for submitting false positives |
5. How You Can Help
If you find that there is a vendor which I have left out of the list, please leave a comment about this so I can investigate. Also, if you find that any of the information I provide is incorrect, please let me know immediately so that I can fix this. This includes circumstances in which, I say I have confirmed that an option does not exist when it now does; information that does not work as promised; vendors that no longer support their product, etc. I will personally look into all information provided before adding it to the article. Starred products are those that I currently realize are in need of information. I could really use your help with those vendors as well.
That said, because of the strict requirements I have imposed for stating that I have confirmed that something does not exist, I will not be able to say that I have confirmed that submission options do not exist just because someone states it in the comments. I hope you understand that I am not insulting anyone but just being very cautious before adding information to the article. However, things like submission links or email addresses I can investigate myself and add. I only need an official response for confirming that something does not currently exist.
I really do need your help to maintain this article as this is way too much information for me to investigate on my own. Keeping this list up to date would require an astronomical amount of work, and I’m already very busy with many other projects. I thank you for whatever time you can contribute to make this the best malware submission article on the internet.