E-mails for submitting samples to AV companies (2.0)

Hey y'all

Wilders Security Forum has an old topic from 2006 that contained a list of email addresses to submit malware to AV vendors. Well I have been using the list recently and I have learned that a few of the emails are no longer used or are changed so I was wondering if y'all could help me create a new list of AV vendors email addresses. You can see the old thread here: https://www.wilderssecurity.com/showthread.php?t=132843&highlight=Email+Submission

Dr. Web - vms[AT]drweb.com
F-Prot - viruslab[AT]f-prot.com
Kaspersky - newvirus[AT]kaspersky.com
NOD32 - samples[AT]eset.com or sample[AT]eset.com
Panda: virus[AT]pandasecurity.com or virussamples[AT]pandasecurity.com
avast! - virus[AT]avast.com
Command - virus[AT]authentium.com
VBA32 - newVirus[AT]anti-virus.by
AVG - virus[AT]avg.com
Avira - virus[AT]avira.com
EmsiSoft - submit[AT]emsisoft.com
Fortinet -submitvirus[AT]fortinet.com
Kaspersky: newvirus[AT]kaspersky.com
Microsoft: avsubmit[AT]submit.microsoft.com
QuickHeal: viruslab[AT]quickheal.com
Sophos: samples[AT]sophos.com
Symantec: avsubmit[AT]symantec.com

These are the one's I know that work. So far the McAfee, F-Secure, CA, and Trend Micro emails have came back to me so I have a feeling they at some point changed the addresses. I have not tested all of them so if you know they would please add them here so I can add them to the list.

 

Found an old list so not verified

analysis@norman.no
Antivir@dials.ru
avsubmit@submit.microsoft.com
avsubmit@symantec.com
detections@spybot.info
esafe.virus@eAladdin.com
hauri98@hauri.co.kr
ipevirus@vet.com.au
malwaresubmit@comodo.com
newvirus@kaspersky.com
research@finjan.com
research@lavasoft.com
sample@nod32.com
samples@eset.com
samples@sophos.com
samples@superantispyware.com
spywarereport@sunbelt-software.com
submissions@webroot.com
submit@emsisoft.com
submit@ewido.net
submit@misec.net
submit@simplysup.com
support@bitdefender.com
trojans@moosoft.com
virsample@pspl.com
virus@asw.cz
virus@avast.com
virus@avira.com
virus@ca.com
virus@commandcom.com
virus@grisoft.cz
virus_doctor@trendmicro.com
virus_research@nai.com
virus_submission@bitdefender.com
virus_submission@centralcommand.com
viruslab@complex.is
viruslab@f-prot.com
viruslab@quickheal.com
virussamples@pandasoftware.com
vms@drweb.com
windefend@submit.microsoft.com

 

works fine

 

i thik
virussamples@pandasoftware.com
is working. get no delevery message or is an other adress out?
trentmicro is this:
viruslab@trendmicro-europe.com

 

sample@ikarus.at

or http://anubis.iseclab.org/

 

Well it may still be up, the new address is virussamples@Pandasecurity.com

 

Immunet: submit@samples.immunet.com

 

Anyone know the email for McAfee and CA?

 

virus_research@avertlabs.com
virus@ca.com

 

I was getting emails returned from virus(AT)ca.com

 

strange, works fine here

 

I am not sure Symantec accept samples this way. I haven't tried it but I know the ticket way by using web site . Additionally , in Symantec document I have read they always provide links to their web pages:

Norton users
https://submit.symantec.com/retail

Business users submit depening on the support service they have paid for:
Corporate users with Basic Maitanace support
https://submit.symantec.com/basic

Corporate users with Essential support
https://submit.symantec.com/essential

Corporate users with Gold support
https://submit.symantec.com/gold

Corporate users with Platinum support
https://submit.symantec.com/platinum



For various false positive , this address is used:
https://submit.symantec.com/dispute/

 

AVIRA's is http://analysis.avira.com/samples/index.php

 

virus(AT)ca.com works again, I guess the CA email provider was down the one day I submitted the sample.

 

Anyone have the email for Rising?

 

No E-Mail, Ibrad.

They use a "Submit a Ticket" system, that works very well.

To do that you need to register an account and send a Ticket, with examples if needed. See here how to do that.

 

Vipre/Sunbelt

malware-cruncher@sandbox.sunbeltsoftware.com

Use this address for bulk submissions without getting any feedback.

 

Came across this French website that has email addresses for AV venders. I don't know how accurate they are but should be useful. I had to translate it with Google.

http://translate.google.com/translate?hl=en&sl=fr&u=http://assiste.com.free.fr/p/antivirus_gratuits_en_ligne/soumettre_un_echantillon.html&ei=e49RTKbHK4OglAeWpMGFBg&sa=X&oi=translate&ct=result&resnum=10&ved=0CEgQ7gEwCQ&prev=/search%3Fq%3Dmalware-cruncher%2540sandbox.sunbelt%2Bsoftware.com%26hl%3Den%26sa%3DX

 

It would be nice with a program similar to VT-uploader which sends the samples to all listed vendors directly.

 

I'm looking to create a program that upload virus samples to all or selected emails. Would anyone be interested in testing ? Pm me. Give me a week to get it wrote and designed. Any in put would be great.

 

You mean like X-Ray?

 

it would be similar but It would be all thought Email, and wanted to be able to use Virustotal api along with other analyser that are online.

would you think it would be useful if not I wont waste my time lol

 

It'd be useful for mass submission, if email cc/bcc are used and the file is uploaded to the other analyzer at the same time as VirusTotal.

Which other analyzers are possible anyways?