E-mails for submitting samples to AV companies

[pykko]

July 2010: See updated list in new thread: E-mails for submitting samples to AV companies (2.0)



Because there are plenty of new viruses every day and many of you want to send them to a particular AV company to add detection for it I thought it's nice to post here e-mails where you could send those samples.

Here they are:
AVIRA - virus_malware[AT]avira.com
Bit Defender - virus_submission[AT]bitdefender.com
Dr. Web - vms[AT]drweb.com
F-Prot - viruslab[AT]f-prot.com
Kaspersky - newvirus[AT]kaspersky.com
NOD32 - samples[AT]eset.com or sample[AT]eset.com
Panda - virus[AT][pandasoftware.com

[izi]

Norman: http://sandbox.norman.no/live_4.html

[Firecat]

ClamAV:
http://cgi.clamav.net/sendvirus.cgi

Trend Micro:
http://subwiz.trendmicro.com/SubWiz/Default.asp

McAfee:
www.webimmune.net

[RejZoR]

avast! - virus[AT]avast.com

[Brandon]

ViruScape - http://www.terainnovations.com/upload.php
F-Secure - http://support.f-secure.com/enu/home...x_sample.shtml
Command - virus[AT}authentium.com

eTrust EZ Antivirus - http://www.my-etrust.com/services/virusSample.cfm
Vet - support[AT]vet.com.au
InoculateIT - virus[AT]ca.com

[dan_maran]

VBA32 - newVirus[AT]anti-virus.by

[IBK]

Ahnlab: v3sos[AT]ahnlab.com
ArcaBit: virus[AT]arcabit.com
Avast: virus[AT]avast.com
AVG: virus[AT]grisoft.cz
AVIRA: virus[AT]avira.com
BitDefender: virus_submission[AT]bitdefender.com
CA: virus[AT]ca.com
Dr.Web: vms[AT]drweb.com
EmsiSoft: submit[AT]emsisoft.com
eSafe: esafe.virus[AT]eAladdin.com
ESET: samples[AT]eset.com
Ewido: submit[AT]ewido.net
Fortinet: submitvirus[AT]fortinet.com
F-Prot: viruslab[AT]f-prot.com
F-Secure: samples[AT]f-secure.com
Hauri: hauri98[AT]hauri.co.kr
Ikarus: analyse[AT]ikarus.at
Kaspersky: newvirus[AT]kaspersky.com
McAfee: vsample[AT]avertlabs.com
Microsoft: avsubmit[AT]submit.microsoft.com
Norman: analysis[AT]norman.no
Panda: virussamples[AT]pandasoftware.com
QuickHeal: viruslab[AT]quickheal.com
Sophos: samples[AT]sophos.com
Symantec: avsubmit[AT]symantec.com
TrendMicro: virus_doctor[AT]trendmicro.com
UNA: newvirus[AT]unasoft.com.ua
VBA32: newvirus[AT]anti-virus.by
VirusBuster: virus[AT]virusbuster.hu

For fast copy&paste: ~ See attached text document - dog ~

[TonyKlein]

BOClean: support[AT]nsclean.com (I don't think there is a separate addy for submittals; please correct me if I'm wrong)

What a lovely collection of emails ,
looks like made especially for spammers

[TNT]

Originally Posted by TonyKlein

BOClean: support[AT]sclean.com (I don't think there is a separate addy for submittals; please correct me if I'm wrong)

You're wrong. submissions(at)nsclean.com

[TeraInnovations]

The link to our web form was already posted by Brandon, but if you are looking for just email - submit[at]terainnovations.com.

[tiagozt]

I use it:
http://www.trojaner-board.de/archive...p/t-19273.html

[pykko]

Tauscan - trojans[AT]agnitum.com

[pilotart]

AntiVir has an automated icon in the Quarantine Page that Emails the files and information with one click, an acknowledgement Email is returned instantly.

For HUER/* marked files, they would also like you to...

"please send this file in a password protected zip file to" heuristik2@avira.com
This is AntiVir's Hueristic Email site

Could use a 'sticky' at top of this thread with instructions on the best way to "password Zip" the files.

Only one I saw was 7zip [show password] and then they did not seem password protected. Also on Right-click menu was an option for RAR to compress and Email, but saw no way to 'password'.

[zenith_zenobia]

Virus Chaser : inquiry[AT]viruschaser.com.hk

[rayoflight]

Main URL for Trend Micro (faster response):
http://www.trendmicro-europe.com/avservice

[jlo]

For Windows Defender;

windefend(AT)submit.microsoft.com

Cheers

Jlo

[lucas1985]

This is IBK´s list with the following adds:
Hacksoft, BOClean, Windows Defender, SUPERAntiSpyware, Virus Chaser, Trojan Hunter, SpyBot Search and Destroy, Ad-aware, PrevX.
EDIT:
Added PrevX.

[lucas1985]

Well, the only missing mails are the addresses of Kingsoft, Rising, Sunbelt, Webroot and PC Tools.
ClamAV only uses a web-form.

[EraserHW]

virus_AT_prevxresearch.com

[lucas1985]

Originally Posted by EraserHW

virus[at]prevxresearch.com

Thanks
Email list updated.

[Jooske]

You might like to add the note if possible please zip the samples to avoid some bouncing and damaging the code.
I did not password-protect my zips, although Symantec doesn't accept samples without that. I forgot their standard password though.

[LowWaterMark]

Removed a post recommending the sending of samples to an unknown and unapproved source.

[lucas1985]

Well, the only "big" misses are the addresses of Sunbelt, Webroot and PC Tools.

[lucas1985]

Sunbelt:
malware-cruncher_at_sunbelt-software.com

Email list updated