Sunday 8 May 2011

How to submit a sample to antivirus companies

With some guys in the VirusTotal 'social network' and in some other communities (malwareup etc..) i've asked and searched for make a non exhaustive list of av editor which leaves a contact form or email adress to collaborate (sending malware samples)

I got the idea after viewing sites like 'roguedatabase' and 'uploadmalware':



Ahnlab: v3sos[@]ahnlab.com
ArcaBit: virus[@]arcabit.com
Avast: virus[@]avast.com
AVG: virus[@]avg.com
AVIRA: virus[@]avira.com
BitDefender: virus_submission[@]bitdefender.com
CA: virus[@]ca.com
Comodo: malwaresubmit[@]comodo.com
Comodo: malwaresubmit[@]avlab.comodo.com
Dr.Web: vms[@]drweb.com
EmsiSoft: submit[@]emsisoft.com
eSafe: esafe.virus[@]eAladdin.com
ESET: samples[@]eset.com
Ewido: submit[@]ewido.net
Fortinet: submitvirus[@]fortinet.com
F-Prot: viruslab[@]f-prot.com
F-Secure: samples[@]f-secure.com
Hauri: hauri98[@]hauri.co.kr
Ikarus: analyse[@]ikarus.at
Kaspersky: newvirus[@]kaspersky.com
McAfee: vsample[@]avertlabs.com
Microsoft: avsubmit[@]submit.microsoft.com
Norman: analysis[@]norman.no
Panda: virussamples[@]pandasoftware.com
Panda: virussamples[@]pandasecurity.com
PrevX: virus[@]prevxresearch.com
QuickHeal: viruslab[@]quickheal.com
Sophos: samples[@]sophos.com
Sunbelt: malware-cruncher[@]sunbelt-software.com
Symantec: avsubmit[@]symantec.com
Tauscan: trojans[@]agnitum.com
The Cleaner:trojans[@]moosoft.com
TrendMicro: virus_doctor[@]trendmicro.com
TrojanHunter: submit[@]misec.net
Trojan Remover: submit[@]simplysup.com
UNA: newvirus[@]unasoft.com.ua
VBA32: newvirus[@]anti-virus.by
Virus Chaser : inquiry[@]viruschaser.com.hk
VirusBuster: virus[@]virusbuster.hu
Windows Defender: windefend[@]submit.microsoft.com
Microsoft Security Essentials: avsubmit[@]submit.microsoft.com

Avast: https://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=199&nav=0,2
AVG: http://samplesubmit.avg.com/us-en/sample-scanning
Avira: http://analysis.avira.com/samples/
Dr. Web: http://vms.drweb-av.de/sendvirus/
F-Prot: http://www.f-prot.com/virusinfo/submission_form.html
CA: http://www.ca.com/us/securityadvisor/submitmalware.aspx
A-Squared: http://www.emsisoft.com/en/support/submit/
Clam-AV: http://cgi.clamav.net/sendvirus.cgi
eScan: http://support.mwti.net/support/index.php
Norton: https://submit.symantec.com/websubmit/retail.cgi
McAfee: http://vil.nai.com/vil/submit-sample.aspx
Microsoft: https://www.microsoft.com/security/portal/Submission/Submit.aspx
Nod32: http://samples.nod32.com.sg/
QuickHeal: http://www.quickheal.co.in/submit_sample.asp
Kaspersky: http://support.kaspersky.com/virlab/helpdesk.html
Vipre: http://www.sunbeltsecurity.com/threat/
Trend Micro: http://subwiz.trendmicro.com/SubWiz/Default.asp
Comodo: http://www.comodo.com/home/internet-security/submit.php
Comodo: http://camas.comodo.com/
Digital Patrol: http://www.nictasoft.com/new-virus/
Kingsoft: http://www.pc120.com/fileident/
PC Tools: http://www.pctools.com/mrc/submit/
Rising: http://mailcenter.rising.com.cn/filecheck_en/
Bitdefender: http://www.malwarecity.com/site/Main/uploadMalware
RemoveIt pro: http://www.incodesolutions.com/reportvirus.php
Sophos: https://secure.sophos.com/support/samples
Iobit: http://db.iobit.com/deal/sdsubmit/index.php
The Hacker: http://www.hacksoft.com.pe/upload/ubr_file_upload.php
nProtect: http://global.nprotect.com/security/virus_report.php
Malwarebytes: http://forums.malwarebytes.org/index.php?showforum=44
Maxsecureantivirus: http://www.maxsecureantivirus.com/submitThreat.htm
Nano Antivirus: http://www.nanoav.ru/index.php?option=com_content&view=article&id=15&Itemid=53&lang=en
Webroot: http://support.webroot.com/cgi-bin/webroot.cfg/php/enduser/ask.php
Lavasoft: http://www.lavasoft.com/support/securitycenter/file_upload.php
Superantispyware: http://www.fileresearchcenter.com/submitfile.html
Norman: http://www.norman.com/support/sendmalware/en-us
AhnLab: http://global.ahnlab.com/en/site/support/virusreport/virusReport.do

if you see a broken link or know of an addition, leave a comment :þ

5 comments:

  1. pass-virus
    http://rghost.ru/5714671

    ReplyDelete
  2. Hey Xylit0l,
    huge fan of your work. I wanted to let you know you can also do bulk submissions to SUPERAntiSpyware using our SUPERSampleSubmit tool here: http://www.superantispyware.com/downloads/SUPERSampleSubmit.exe

    ReplyDelete
  3. newvirus@unasoft.com.ua
    and
    virus@prevxresearch.com
    seems to be broken.

    ReplyDelete
  4. broken link:
    http://www.malwarecity.com/site/Main/uploadMalware

    ReplyDelete
    Replies
    1. Redirected to a site that doesn't allow uploads.

      Delete