Author Topic: How to Report Malware or False Positives to Multiple Antivirus Vendors (Read 108009 times)

Chiron · « **on:** February 09, 2010, 11:35:26 PM »

Hello, I've written an article that explains How to Report Malware or False Positives to Multiple Antivirus Vendors.

It is meant to be a comprehensive list of all reputable vendors who produce products that rely on signature detection, in some way, in order to detect all manner of malware. What I have done is investigate how to submit malware, and false positives to all of them. I have then taken this information and created a mailing list that allows you, with a few clicks, to submit malware to the majority of all of the anti-malware vendors in the world. At least that is the idea. You can also submit the malware to the reset of them manually, but the idea is to make it as easy as possible to submit it to as many as possible with as little work as possible.

Please use this article to submit any malware you find to as many vendors as possible so we can help to make the online world a safer place. Also, for anyone who is able, and willing, to help I could use your help to improve this list. Please provide me with whatever feedback you have about the article and help me to make the information provided as accurate, and poignant, as possible. It would be most effective to leave the feedback in the comments section of the article so I have all of the feedback in one place. This will help me to best utilize it to improve the article.

Thank you.

[attachment deleted by admin]

Tobby · « **Reply #1 on:** February 10, 2010, 12:16:52 AM »

Thanks
Useful and classic

3xist · « **Reply #2 on:** February 10, 2010, 01:12:52 AM »

Thanks Chiron494

This will be useful for not only members, but guests as well. I will sticky this for you.

Cheers,
Josh

Matty_R · « **Reply #3 on:** February 10, 2010, 03:56:32 PM »

Avira, Sophos, CA (Computer Associates), F-Prot, G-Data, Twister, Malwarebytes, SAS, Drive Sentry, Vipre....

Some more anti-malware rather than anti-virus, but is there a differance!

Nice list Chiron, good work

Krishnan · « **Reply #4 on:** June 28, 2010, 04:46:11 AM »

Quick Heal
viruslab[at]quickheal.com

Chiron · « **Reply #5 on:** June 28, 2010, 12:19:04 PM »

Quote from: Krishnan on June 28, 2010, 04:46:11 AM

Quick Heal
viruslab[at]quickheal.com

I've now added Quick Heal to the list. I've also found their online submission page.

I appreciate you pointing this out to me. Thank you.

mouse1 · « **Reply #6 on:** June 28, 2010, 02:59:30 PM »

This is an excellent idea Chiron, reflecting Comodo's community spirit!

Best wishes

Mouse

Krishnan · « **Reply #7 on:** June 29, 2010, 05:02:35 AM »

Quote from: Chiron on June 28, 2010, 12:19:04 PM

I've now added Quick Heal to the list. I've also found their online submission page.

I appreciate you pointing this out to me. Thank you.

One can also send malicious files to Avira Antivir through this id as well
virus[at]avira.com

Chiron · « **Reply #8 on:** June 29, 2010, 06:10:20 PM »

Quote from: Krishnan on June 29, 2010, 05:02:35 AM

One can also send malicious files to Avira Antivir through this id as well
virus[at]avira.com

Thank you for pointing this out to me. I've now added the email address to the list.

I had been operating under the assumption that if I could find a web submission form I didn't need to include an email address, but if you believe it to be useful I have no problem including them.

Please let me know of any others that you also feel should have an email address provided.

Saladien · « **Reply #9 on:** August 02, 2010, 01:17:17 AM »

hi,
here you go:
http://www.agnitum.com/support/submit_files.php

or easyer

http://www.av-comparatives.org/forum/index.php?page=Thread&threadID=10

i know its old but the onlyone i could find..
hope i could help in someway

MfG

Saladien

Chiron · « **Reply #10 on:** August 02, 2010, 07:04:02 PM »

Quote from: Saladien on August 02, 2010, 01:17:17 AM

hi,
here you go:
http://www.agnitum.com/support/submit_files.php

or easyer

http://www.av-comparatives.org/forum/index.php?page=Thread&threadID=10

i know its old but the onlyone i could find..
hope i could help in someway

MfG

Saladien

Thanks, I've included the products from that list and updated the formatting of this post as well (and the title). I just hope the email addresses from that list are still valid. I included the web submission forms if I could find them, but some I couldn't find so I had to use the email addresses from the list. Thanks again.

Chiron · « **Reply #11 on:** August 02, 2010, 09:17:09 PM »

There, I've finished tracking down every vendor I could find. I dare anyone to find a longer list (because I'll then copy it and expand mine

).

Let me know if there's any I've missed.

Saladien · « **Reply #12 on:** August 03, 2010, 12:54:23 AM »

Hi,

a few years back i had a big new list and now guess waht i found again

the list
http://www.rokop-security.de/index.php?showtopic=17635

and you can see the guy made a file for(thunderbird and so one) so you copy the adresses in the line and send one file to all of them, nice idear.
the email adresses are from 31.03.2010, 21:02 so i think they are valid

.
please dont hate me now

I hope you can work with this german page, if you have a question just ask,
greetings from Germany.

MfG

Saladien

Chiron · « **Reply #13 on:** August 05, 2010, 10:56:18 PM »

Quote from: Saladien on August 03, 2010, 12:54:23 AM

a few years back i had a big new list and now guess waht i found again
the list
http://www.rokop-security.de/index.php?showtopic=17635

Thanks. I've now incorporated its information is now mine.

Quote from: Saladien on August 03, 2010, 12:54:23 AM

please dont hate me now

Why. You have given me much more information then I had. Of course if the page had had more than I had before you sent me it I might be hunting you down, but it didn't. (Lucky you

)

Do you know of any other antiviruses. Also, I'm now incorporating both the web submission forms and the email addresses, if I can find them.

Thanks.

Saladien · « **Reply #14 on:** August 06, 2010, 05:58:13 AM »

,
let me think *thinking *crash *reboot *ok

ok i know i will regret this but i make a list now...

if you want to you can take the link to every thing directly or you only take the board themselfs...
i have a new objective i bring this list to perfection with you

i think its time to make this list not only for submition but for everything about the products from submition, to support,
to feature request and so one that would make this list perfect and show them that comodo is community powered

i also addet firewalls to the list because they are security software to and the javacoolsoftware and spybot are maleware and suspicuse websites.
i addet security blogs to and beta ares and so one but i am not finished jet i have about 40% done i think now its up to you to make the list readabel

We need a fu ... wiki

https://www.eset.de/support/supportanfrage
Support page

https://www.eset.de/support
FAQ Page

Javacool Software
http://www.javacoolsoftware.com/products.html

http://www.wilderssecurity.com/forumdisplay.php?f=19

http://www.wilderssecurity.com/forumdisplay.php?f=20
FileChecker & ID-Blaster Forum
http://www.wilderssecurity.com/forumdisplay.php?f=22
MRU Blaster Forum
http://www.wilderssecurity.com/forumdisplay.php?f=21
EULAlyzer Forum
http://www.wilderssecurity.com/forumdisplay.php?f=23
SpywareBlaster & Other Forum

just a thinking but i think submition for new maliacuse(right spelling?

) websites is
http://www.wilderssecurity.com/private.php?do=newpm&u=343

so you send him a pm but just a thinking.

Leapfrog Software
http://www.leapfrogsoftware.com/

http://www.wilderssecurity.com/forumdisplay.php?f=83
Official Leapfrog Software Forum

http://www.wilderssecurity.com/forumdisplay.php?f=85
FirstDefense-Rescue Forum
http://www.wilderssecurity.com/forumdisplay.php?f=84
FirstDefense-ISR Forum

Look 'n' Stop

http://www.looknstop.com/En/index2.htm

http://www.wilderssecurity.com/forumdisplay.php?f=27
Official LooknStop Firewall Forum

http://www.wilderssecurity.com/forumdisplay.php?f=28
LnS English Forum
http://www.wilderssecurity.com/forumdisplay.php?f=29
LnS French Forum

http://www.looknstop.com/En/support.htm
Free Support

http://www.looknstop.com/En/support2.htm
Customer Support

escan was that one that uses kaspersky engine so you can submit to kaspersky

f-secure uses kaspersky by the way to and a selfmade engine.

gdata uses avast and bitdefender when my information is still right i may check that after i am finished here and my browser dont crash again...

here the support page
http://www.escanav.com/english/content/support_training/support/escan_tech_support.asp

http://forums.mwti.net/
the official board for escan.

ok one that i found:

Novashield

http://www.novashield.com/Anti-Malware.aspx

http://www.novashield.com/Anti-Malware/Customer-Support.aspx
Support Page

i will download it and check it if it is legit but until then i submit it here.

but seems legit.

Hitman(i love this tool

)

http://www.surfright.nl/en

at the moment it youses Prevx, Emsisoft(a-squared), G-Data(Avast+Bitdefender+ G-Datas own Engine), Dr.Web, IKARUS and there one Engine
about submition i dont need to say anything, but ido just ask the support and they will maka a vpn remotedesktop connection or
submit to one of the above.

http://www.surfright.nl/en/support/
Support

kingsoft
http://www.kingsoftresearch.com/submit.php
and
http://cs.5107.cn/vt/chat/chat.php?c=117245&s=1&pageUrl=http%3A%2F%2Fwww.kingsoftresearch.com%2Fsubmit.php&pageName=Welcome%20to%20Kingsoft.%20Your%20Best&referedUrl=http%3A%2F%2Fwww.kingsoftresearch.com%2F&searchEngine=undefined&keyWord=undefined&ie=Netscape[object%20MouseEvent]
for live support or on the left of the page on the banner.

the support page itself is
http://www.kingsoftresearch.com/support.php

KV Antivirus
http://global.jiangmin.com/support.htm
Support
and FAQ
http://global.jiangmin.com/contact.htm
information Page

submition should be
support[at]jiangmin.com

Antiy

michael.wang[at]antiy.com
Contact for EN
japan[at]antiy.com
for JP

should be submition to and support.

Authentium

http://authentium.custhelp.com/cgi-bin/authentium.cfg/php/enduser/std_adp.php?p_faqid=2683&p_created=1224694914&p_sid=D4lieM6k&p_accessibility=0&p_redirect=&p_srch=&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9JnBfcm93X2NudD0zODcsMzg3JnBfcHJvZHM9JnBfY2F0cz0mcF9wdj0mcF9jdj0mcF9zZWFyY2hfdHlwZT1hbnN3ZXJzLnNlYXJjaF9ubCZwX3BhZ2U9MQ!!&p_li=&p_topview=1
FTP submition
http://authentium.custhelp.com/cgi-bin/authentium.cfg/php/enduser/std_adp.php?p_faqid=2171&p_created=1153762643&p_sid=D4lieM6k&p_accessibility=0&p_redirect=&p_srch=&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9JnBfcm93X2NudD0zODcsMzg3JnBfcHJvZHM9JnBfY2F0cz0mcF9wdj0mcF9jdj0mcF9zZWFyY2hfdHlwZT1hbnN3ZXJzLnNlYXJjaF9ubCZwX3BhZ2U9MQ!!&p_li=&p_topview=1
Virus Submition

virus[at]authentium.com
the password needs to be(zip file):
"virusvirus" without quotes

http://www.authentium.com/mainv2/care.htm
Support

Avast

http://forum.avast.com/
Official Forum

ftp://ftp.avast.com/
FTP submition(they dont check without you to ask them for so ask

)

http://support.avast.com/index.php
Support and FAQ Page

Bullguard

https://ba-twin1-1.bullguard.com/webchat/startchatanonymous.aspx?loc=support&language=en
Chat

Chat offline?

Should the chat on rare occasions be offline, please write an e-mail to support[at]bullguard.com.

English Support:

- 24/7; response time is 1h.
- email address: support[at]bullguard.com

Danish Support:

- 9:00 AM - 9:00 PM weekdays; 10 am - 6 pm weekends; response time is 24h.
- email address: support_dk[at]bullguard.com

German Support:

- 5:00 AM - 9:00 PM daily; response time 1h during service hours and 24h outside service hours.
- email address: support_de[at]bullguard.com

French Support:

- 5:00 AM - 9:00 PM weekdays; response time 1h during service hours and 24h outside service hours.
- email address: support_fr[at]bullguard.com

Spanish Support:

- 5:00 AM - 9:00 PM daily; response time 1h during service hours and 24h outside service hours.
- email address: support_es[at]bullguard.com

Swedish & Norwegian Support:

- 9:00 AM to 5:00 PM weekdays; response time is 24h.
- email address: support_se_no[at]bullguard.com

http://forum.bullguard.com/forum/
Official Support Forum

esafe

http://www.aladdin.com/support/esafe.aspx
Support

http://www.aladdin.com/forum/list.asp?fid=1
Official Forum

Emsisoft

http://support.emsisoft.com/
official Emsisoft Support Forum

https://cc.emsisoft.com/login.aspx?ReturnUrl=%2fen%2fdefault.aspx
Customer Support

http://www.emsisoft.de/en/support/faq/
FAQ

Dr.Web

http://support.drweb.com/?lng=en
Support Page
http://forum.drweb.com/
Official Support Forum

Comodo
http://forums.comodo.com/index.php
you know

http://forums.comodo.com/melihs-corner-ceo-talkdiscussionsblog-b36.0/
God

http://support.comodo.com/
FAQ and Support

Clam AV

http://www.clamav.net/lang/en/contacts/
Contact
http://www.clamav.net/lang/en/support/
Support
https://clamsupport.sourcefire.com/
Paid Support

Support also avaibel via Immunet

CA

http://www.ca.com/us/support.aspx
Support

https://support.ca.com/irj/portal/anonymous/phpdocs?filePath=0/common/cabetas-programlist.html
Beta Programm

EEye

http://www.eeye.com/Support/Knowledge-Base.aspx

http://forums.eeye.com/forums/
Official Forums

Bitdefender

http://www.bitdefender.com/site/KnowledgeBase/consumer/
FAQ+Support

http://www.bitdefender.com/site/Main/contact/
Contact

Avira

http://www.avira.com/en/support/index.html
Knowledgebase

http://www.avira.com/en/support/faqindex.php
FAQ

AVG

http://www.avg.com/us-en/support-home
Support

http://www.avg.com/us-en/1074
Paid Support

http://www.avg.com/us-en/faq
FAQ

http://www.avg.com/us-en/kb
Knowledgebase

Arcabit

http://www.arcabit.com/support
Support

Sales department
office[at]arcabit.com
Technical support department
support[at]arcabit.com
Contact for press
marketing[at]arcabit.com

AhnLab

http://global.ahnlab.com/en/site/support/supportMain.do
Support

escan
http://www.escanav.com/english/content/support_training/support/escan_tech_support.asp
Support

http://support.mwti.net/support/visitor/index.php?_m=livesupport&_a=startclientchat&sessionid=bm2njxe31o3m5xe324riaxe3gwz6xxe3&proactive=0&departmentid=0&randno=52&fullname=&email=
LiveSupport

Fortinet

http://blog.fortinet.com/
Security Blog

http://www.fortinet.com/support/contact_support.html
Support

F-Prot

https://forum.f-prot.com/
Official Support Forum

http://support.f-prot.com/index.php?&group=en&languageid=1
Support with KB

F-Secure

http://www.f-secure.com/en_US/support/
Knowledge Base

http://www.f-secure.com/en_EMEA/support/home-office/contact-support/index.html
Support

http://www.f-secure.com/en_EMEA/support/home-office/contact-support/chat-now.html
LiveSupport

G-Data

http://www.gdata-software.com/support/faq.html
FAQ

http://www.gdata-software.com/support/customer-service.html
Support

Ikarus

http://www.ikarus.at/en/private/support/faqs/
FAQ private

http://www.ikarus.at/en/private/support/support-forms/
Support Private

http://www.ikarus.at/en/private/support/contact/
Contact Privat

http://www.ikarus.at/en/business/support/faqs/
FAQ Business

http://www.ikarus.at/en/business/support/support-forms/
Support Business

http://www.ikarus.at/en/business/support/contact/
Contact Business

Immunet

http://support.immunet.com/tiki-index.php?page=HomePage
KnowledgeBase
http://forum.immunet.com/
Official Forums
http://blog.immunet.com/
Security Blog
support[at]immunet.com
Support Email EN

K7

http://www.k7computing.com/en/Support/Support.php
Support
http://www.k7computing.com/en/Forms/Support-Request.php
Support2
http://blog.k7computing.com/
Security Blog

ok thats it for now..

This is just the first step i will give you more

.
You can see that i only jump in the list but i will get the information coming but i dont have the time to make all in one big step this here was about 4 hours + work so..

mainly because firefox crashed and my work was destroyed.. hate the new version so much.

MfG( "MfG" or "mfg", German language abbreviation for mit freundlichem Gruß or mit freundlichen Grüßen, with the meaning of Best Regards, very common in electronic communication ) by the way i love the Wikipedia

Saladien