How to Report Malware or False Positives to Multiple Antivirus Vendors

[spywar]

I think the page is dedicated to Antivirus vendors, thus Combofix shouldn't be added..

[yigido]

I think the page is dedicated to Antivirus vendors, thus Combofix shouldn't be added..

HitmanPro is not a antivirus, it is a on demand scanner like Combofix

[spywar]

HitmanPro is not a antivirus, it is a on demand scanner like Combofix

HitmanPro is more designed for the public than Combofix which is used by malware removal experts...are not same.

[yigido]

HitmanPro is more designed for the public than Combofix which is used by malware removal experts...are not same.

my wish is only a suggestion..

[Chiron]

1- AVG "report malware via mail" this mail adress is no longer available they said here

I have removed the email address for reporting false positives.

2- Antiy is also doesnt work 

Their site still lists that page as where suspicious samples should be submitted, but the site will not load. Please give this a few days to see if it starts working again. If not, please respond again and I will look into this further.

3- ESET/Nod32 "online malware submission" is not working... (page doesnt open, not available)

I have removed the malware submission form link as I cannot find any references to the page. All I can find is advice to submit it via email.

4- eScan "online malware submission" webpage no longer available..

Their site still lists that page as where suspicious samples should be submitted, but the site will not load. Please give this a few days to see if it starts working again. If not, please respond again and I will look into this further.

5- Lavasoft Ad-Aware from now on they uses Bitdefender engine.. (maybe you can note this)

I usually only note this if they would prefer that users submit samples directly to the other AV, in this case BitDefender. However, for most cases where their are dual engines the product would prefer to also get samples submitted to them. I believe this was the same for Lavasoft.

6- HitmanPro changed the cloud engines, they are using now Kaspersky, Bitdefender, Emsisioft (you can change the note)

Thank you. I have updated the links.

7- Maybe you can add the "Combofix" in this vendor list

I did consider this one. However, as it does not have its own website (which is one of the criteria) it was not eligible for the list.

Let me know if you find anything else.

Thank you.

[yigido]

Thanks for confirmation and fixes.
Also these issues happen;

1- total defence malware submission is not working, the link goes to online shop website

2- ClamAV malware submission site is here, not Immunet Free signatures only..

3- Trend Micro online malware submission site is not available, they lead to e-mail adress.

4- "Protector Plus/Proland" online malware submission website is not available now.

5- Kingsoft online malware submit website is not available now. (500-internal server error)

6- e-Scan online malware submit link not available. I found this page , you can go with 'submit ticket' for submission a suspicious. 
 
7- CMC online malware submit site is not available.

8- ArcaVir/arcabit online malware submit site is not available.

9- Antiy online malware submit site is not available.

if I will see any problems I will write again 

[Chiron]

1- total defence malware submission is not working, the link goes to online shop website

Thanks, I've now linked to the correct address.

2- ClamAV malware submission site is here, not Immunet Free signatures only..

Do they not share the same signatures? I ask because I don't want to advise that users submit the same sample twice unless there is a need.

3- Trend Micro online malware submission site is not available, they lead to e-mail adress.

Thank you. I have now removed the site link.

4- "Protector Plus/Proland" online malware submission website is not available now.

Thank you. I have removed this option.

5- Kingsoft online malware submit website is not available now. (500-internal server error)

I have now redirected these links to the, hopefully correct, parts of their forum.

6- e-Scan online malware submit link not available. I found this page , you can go with 'submit ticket' for submission a suspicious. 
 

Thank you. I have now altered the article to use this address.

7- CMC online malware submit site is not available.

Thank you. I have now removed these links as I could not find any indications that the upload sites were still available.

8- ArcaVir/arcabit online malware submit site is not available.

Thank you. I have now removed these links as I could not find any indications that the upload site is still available.

9- Antiy online malware submit site is not available.

Their site still lists that page as where suspicious samples should be submitted, but the site will not load. Please give this a few days to see if it starts working again. If not, please respond again and I will look into this further.

[yigido]

Hello Chiron,

I found these sites for ClamAV, please check for availability..

Online Malware Submission

Online False Positive Submission

thnaks for all fixes 

[Chiron]

Hello Chiron,

I found these sites for ClamAV, please check for availability..

Online Malware Submission

Online False Positive Submission

thnaks for all fixes 

I asked Immunet staff a while ago whether there is a need to submit malware to both, and they let me know that they are processed by the same team. The correspondence can be read here:
http://forum.immunet.com/index.php?/topic/1942-question-about-submitting-samples/

Thus, I think I will advise users to just submit the malware and false positives to Immunet.

Thanks.

[yigido]

Hello Chrion,

Antiy still not workin'.. you can check yourself

Thanks

[Chiron]

Hello Chrion,

Antiy still not workin'.. you can check yourself

Thanks

Thank you. I have updated the article.

[yigido]

I have got the error message after sending samples to submission via e-mail.
I think they changed their sample submission mail adress.
e-mail's does not work listed below...

Delivery to the following recipients failed

postmaster[at]bullguard.com
k7viruslab[at]k7computing.com
report[at]prevxresearch.com
michael.wang[at]antiy.com
virus_submission[at]centralcommand.com

Please update the .txt file in the first message of this topic

Thanks
yigido

[Chiron]

I have got the error message after sending samples to submission via e-mail.
I think they changed their sample submission mail adress.
e-mail's does not work listed below...

Delivery to the following recipients failed

postmaster[at]bullguard.com
k7viruslab[at]k7computing.com
report[at]prevxresearch.com
michael.wang[at]antiy.com
virus_submission[at]centralcommand.com

Please update the .txt file in the first message of this topic

Thanks
yigido

I just tested this by submitting a 400kB file. The only failure I had was from novirusthanks, which strangely enough worked for you.

Perhaps what happened is that the file you were submitting was too big. Many of the services have a very small maximum file size they will allow. Otherwise it will be bounced back. Please try with a file size smaller than 1MB and let me know if you still experience these problems. Also, let me know if it's bounced back from novirusthanks for you as well.

Thanks.

[yigido]

I submitted the files yesterday and I get this error message today 

I think you will get the delivery error mail after a while 

[Chiron]

I still have not gotten any more error messages. Can you please let me know roughly how long after submitting the sample you got the emails?

Thanks.