BlackList Name
|
How to Report False Positive to the Blacklist
|
360 Qihoo 360 (360 Total Security) false positive removal |
kefu@360.cn |
AhnLab AhnLab (V3) false positive removal |
https://global.ahnlab.com/site/support/virusreport/virusReport.do |
| Cyberoam |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Avira |
Acronis Acronis false positive removal |
https://kb.acronis.com/content/62189 |
Ad-Aware Adaware false positive removal |
https://www.adaware.com/report-false-positives |
AegisLab AegisLab false positive removal |
support@aegislab.com |
ADMINUSLabs ADMINUSLabs false positive removal |
samples@adminus.net |
Agnitum Agnitum (Outpost) false positive removal |
trojans@agnitum.com |
| Ahnlab |
e-support@ahnlab.com, samples@ahnlab.com |
| AhnLab-V3 |
v3sos@ahnlab.com |
| Alibaba |
virustotal@list.alibaba-inc.com |
Alyac (Estsoft) AlYac (ESTsecurity) false positive removal |
esrc@estsecurity.com |
| Antivir |
cleanset@avira.com, virus_malware@avira.com, virus@avira.com |
Antiy Antiy-AVL false positive removal |
avlsdk_support_vt@antiy.cn |
| Antiy-AVL |
https://www.antiy.net/contacts/ |
Arcabit Arcabit false positive removal |
virus@arcabit.com |
| Ashampoo |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender |
| Auslogics |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender |
Avast Avast false positive removal |
virus@avast.com https://www.avast.com/false-positive-file-form.php |
AVG AVG false positive removal |
http://www.avg.com/submit-sample https://www.avg.com/en-us/false-positive-file-form http://samplesubmit.avg.com/us-en/false-detection |
| Avira |
https://www.avira.com/en/analysis/submit |
| Avira AntiVir |
https://analysis.avira.com/en/submit |
AVZ AVZ (Antiviral Toolkit) false positive removal |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky |
Babable Babable false positive removal |
obu@babable.com |
Baidu Baidu false positive removal |
bav@baidu.com, gaoyingchun@baidu.com |
BitDefender Bitdefender false positive removal |
virus_submission@bitdefender.com https://www.bitdefender.com/consumer/support/answer/40673/ http://www.bitdefender.com/site/Main/automaticSampleUploader/ |
Bkav Bkav false positive removal |
fpreport@bkav.com bkav@bkav.com bkav@bkav.com.vn |
BluePoint Security BluePoint Security false positive removal |
fp@bluepointsecurity.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| BullGuard |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender |
ByteHero ByteHero false positive removal |
bytehero@163.com |
CAT-QuickHeal Quick Heal false positive removal |
https://www.quickheal.com/submitticket/ |
Certego Certego false positive removal |
https://www.certego.net/en/contatti/ |
| ClamAV |
http://www.clamav.net/reports/fp https://www.immunet.com/false_positive |
ChongLuaDao ChongLuaDao false positive removal |
https://chongluadao.vn/en/report/reportmistake |
Clean-MX Clean-MX false positive removal |
abuse@clean-mx.de |
CMC CMC (CMC InfoSec) false positive removal |
vulambang@cmcinfosec.com, support.is@cmclab.net |
Comodo Comodo / Xcitium false positive removal |
malwaresubmit@avlab.comodo.com https://www.comodo.com/home/internet-security/submit.php falsepositive@avlab.comodo.com https://www.comodo.com/home/internet-security/submit.php |
Constant Guard/xfinity Constant Guard (Xfinity) false positive removal |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Symantec |
CrowdStrike CrowdStrike false positive removal |
VTscanner@crowdstrike.com |
| CrowdStrike Falcon |
VTscanner@crowdstrike.com |
Cybereason Cybereason false positive removal |
vt-feedback@cybereason.com |
Cylance Cylance (now Arctic Wolf) false positive removal |
cylancefilesubmit@cylance.com https://web.archive.org/web/20190929165253/https://home-support.cylance.com/hc/en-us/articles/360026236014-FAQ-VirusTotal-Inquiry |
CyRadar CyRadar false positive removal |
virustotal@cyradar.com |
Cyren Cyren (now Varist) false positive removal |
https://www.cyren.com/support/reporting-av-misclassifications |
DNS8 DNS8 false positive removal |
dns8@layer8.pt |
Dr. Web Dr.Web false positive removal |
https://vms.drweb.com/sendvirus/ |
| DrWeb: |
vms@drweb.com |
eGambit TEHTRIS (eGambit) false positive removal |
https://tehtris.com/en/false-positive-negative-requests/ |
| eGambit (Tehtris) |
https://tehtris.com/egambit_fp.php |
Elastic Elastic Security false positive removal |
https://discuss.elastic.co/t/submitting-false-positives/232322 |
Emco EMCO Malware Destroyer false positive removal |
malware@emcosoftware.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Emsisoft Emsisoft false positive removal |
submit@emsisoft.com fp@emsisoft.com |
Endgame Endgame false positive removal |
info@endgame.com |
eScan eScan / MicroWorld false positive removal |
fp@escanav.com http://support.mwti.net/support/index.php |
ESET ESET false positive removal |
https://support.eset.com/kb141/?page=content&id=SOLN141 |
| ESET-NOD32 |
https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab#SubmitFile |
| Faronics |
support@faronics.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
FireEye Trellix / FireEye false positive removal |
virustotal@fireeye.com |
| Forcepoint (websense) |
suggest@forcepoint.com |
Fortinet Fortinet (FortiGuard Web Filter) false positive removal |
submitvirus@fortinet.com |
| Fortinet/FortiGuard |
submitvirus@fortinet.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| FortKnox SpyEmergency/Netgate |
mailto:research@spy-emergency.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
F-Prot F-Prot false positive removal |
viruslab@f-prot.com |
| F-Prot/FRISK |
http://support.f-prot.com/index.php?/Tickets/Submit/RenderForm/7 |
F-Secure F-Secure false positive removal |
spyware-samples@f-secure.com, vsamples@f-secure.com https://www.f-secure.com/en/business/support-and-downloads/submit-a-sample https://www.f-secure.com/us-en/business/support-and-downloads/submit-a-sample |
| G Data |
https://su.gdatasoftware.com/us/sample-submission/ https://www.gdatasoftware.com/faq/consumer/submit-a-suspicious-file-app-or-url |
Gridinsoft Gridinsoft false positive removal |
https://gridinsoft.com/incorrect-detection |
Hacksoft TheHacker false positive removal |
virus@hacksoft.com.pe |
Hauri Hauri (ViRobot) false positive removal |
viruslab@hauri.co.kr |
| Hitman Pro |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft |
| HomePage |
support@aegislab.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Ikarus Ikarus false positive removal |
fp@ikarus.at, samples@ikarus.at probe@ikarus.at |
Immunet Protect Immunet false positive removal |
http://www.immunet.com/contact/index.html |
Invincea Invincea false positive removal |
info@invincea.com |
Jiangmin Jiangmin false positive removal |
support@jiangmin.com shaojia@jiangmin.com |
K7 K7 false positive removal |
reportfp@labs.k7computing.com k7viruslab@labs.k7computing.com reportfp@k7computing.com <reportfp@k7computing.com>; |
| K7AntiVirus / K7GW |
support@k7computing.com |
Kaspersky Kaspersky false positive removal |
https://opentip.kaspersky.com/ https://my.kaspersky.com/?logonSessionData=MyAccount&returnUrl=en%2fkpc%2fsupport%2fviruslab |
| Kaspersky: |
newvirus@kaspersky.com |
Kingsoft (Cheetah) Kingsoft (Cheetah Mobile) false positive removal |
operation@cmcm.com |
| Lavasoft Ad-Aware |
http://lavasoft.com/support/securitycenter/report_false_positives.php |
LevelBlue (AlienVault) LevelBlue (AlienVault / AT&T) false positive removal |
https://support.levelblue.com/virustotal-detection-review/ |
Lionic Lionic false positive removal |
https://www.lionic.com/reportfp/ |
| Lumension |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Norman |
Malwarebytes Malwarebytes (Browser Guard) false positive removal |
https://forums.malwarebytes.org/index.php?/forum/42-file-detections/ |
MalwareURL MalwareURL false positive removal |
https://www.malwareurl.com/ |
MAX (SaintSecurity) MAX (Saint Security) false positive removal |
root@malwares.com |
MaxSecure Max Secure false positive removal |
tech@maxpcsecure.com |
McAfee McAfee WebAdvisor / SiteAdvisor false positive removal |
virus_research@avertlabs.com https://mysupport.mcafee.com/Eservice/Default.aspx virus_research@mcafee.com?subject=FALSE%3A%20This%20Sample%20Is%20A%20False%20Positive&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected virus_research@mcafee.com?subject=FALSE%3A%20This%20Sample%20Is%20A%20False%20Positive&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| McAfee-GW |
virus_research_gateway@avertlabs.com |
Microsoft Microsoft Defender SmartScreen false positive removal |
mmpc@submit.microsoft.com |
| Microsoft Security Essentials |
https://www.microsoft.com/security/portal/Submission/Submit.aspx |
| Microworld |
samples@escanav.com |
| Moon Secure |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Immunet_Protect |
| Msecure |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Ikarus |
|
|
|
|
| Nod32/ESET |
samples@eset.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| NoraScan |
support@noralabs.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Norman Norman false positive removal: |
analysis@norman.no, support@norman.com |
nProtect (Inca) nProtect (Inca Internet) false positive removal |
virus_info@inca.co.kr |
Palo Alto Palo Alto Networks (WildFire) false positive removal |
vt-pan-false-positive@paloaltonetworks.com |
Panda Panda false positive removal |
falsepositives@pandasecurity.com, virussamples@pandasecurity.com https://www.pandasecurity.com/usa/homeusers/support/contact.htm?ts=1 https://pandasecurity.com/usa/homeusers/support/contact.htm?ts=1 falsepositives@pandasecurity.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| Phising Database |
https://github.com/mitchellkrogza/Phishing.Database#please-remove-my-domain-from-this-list- |
Preventon Preventon false positive removal |
sample@preventon.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| Qihoo-360 |
https://www.360totalsecurity.com/en/suspicion/false-positive/ |
| QuickHeal |
viruslab@quickheal.com |
Rising Rising false positive removal |
http://mailcenter.rising.com.cn/filecheck_en/ |
Roboscan/ALYac Roboscan false positive removal |
http://www.roboscan.com/support/virus_report.aspx |
Sangfor Engine Zero Sangfor Engine Zero false positive removal |
save@sangfor.com.cn |
| SecureAge APEX |
https://uav.secureage.com/falsepositive/ |
| Sentinel One |
report@sentinelone.com |
| ShawSecure |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#McAfee |
SmartCOP SmartCOP false positive removal |
support@s-cop.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
| Sophos |
samples@sophos.com https://secure.sophos.com/support/samples |
Spybot Search & Destroy Spybot Search & Destroy false positive removal |
http://www.safer-networking.org/contact/detections/ |
SRN/Solo Antivirus SRN Micro / Solo Antivirus false positive removal |
vlab@srnmicro.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Symantec Symantec (Broadcom) false positive removal |
https://submit.symantec.com/false_positive/ avsubmit@symantec.com https://symsubmit.symantec.com/ |
| Tachyon |
isarc@inca.co.kr (include detection name) |
Tencent Tencent false positive removal |
TAVfp@tencent.com |
| TheHacker |
virus@hacksoft.com.pe, falsopositivo@hacksoft.com.pe |
| thirtyseven4 |
analyze@thirtyseven4.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Trapmine Trapmine false positive removal |
fp@trapmine.com |
TrendMicro Trend Micro false positive removal |
https://www.trendmicro.com/en_us/about/legal/detection-reevaluation.html virus@trendmicro.com, virus_doctor@trendmicro.com http://esupport.trendmicro.com/solution/en-us/1037634.aspx |
Trojan Remover Trojan Remover false positive removal/Simply Super Software |
support@simplysup.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Trustlook Trustlook false positive removal |
bd@trustlook.com |
TrustPort TrustPort false positive removal |
support@trustport.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
Trustwave Trustwave (now LevelBlue) false positive removal |
ADavidi@trustwave.com |
| Untangle |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Immunet_Protect |
VBA32 VBA32 (VirusBlokAda) false positive removal |
feedback@anti-virus.by |
| Verizon Internet Security |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#McAfee |
VIPRE VIPRE false positive removal |
https://www.vipre.com/support/submit-false-positive/ |
Vir.IT Vir.IT eXplorer (TG Soft) false positive removal |
http://www.tgsoft.it/english/file_sospetti_eng.asp |
| VirIT |
https://www.tgsoft.it/clienti/inviaFile.asp |
| ViRobot |
viruslab@hauri.co.kr |
| VirusBlokAda/VBA32 |
feedback@anti-virus.by?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected |
VirusDie Virusdie false positive removal |
partners@virusdie.com |
| VIRUSfighter |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Sophos |
Webroot Webroot (BrightCloud) false positive removal |
https://www.webroot.com/us/en/business/support/vendor-dispute-contact-us https://www.webrootanywhere.com/servicewelcome.asp |
Xvirus Xvirus false positive removal |
http://xvirus.net/submit.html |
Yandex Yandex Safe Browsing false positive removal |
yandex-antivir@support.yandex.ru |
Yomi Yomi (Yoroi) false positive removal |
yomi-false-positives@yoroi.company |
| Zemana |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#G_Data https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Ikarus https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Dr._Web |
Zillya Zillya false positive removal |
virus@zillya.com antivirus@zillya.com |
ZoneAlarm ZoneAlarm (Check Point) false positive removal |
zonealarm_VT_reports@checkpoint.com https://opentip.kaspersky.com/ |
| ZoneAlarm/Check Point |
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky |
Zoner Zoner false positive removal |
false@zonerantivirus.com |