VirusTotal false positive contacts collection

Wall of Shame

These vendors don't provide a free and registration-less way to submit false positives via HTTP or e-mail.

How to send e-mails

Most vendors ask you to zip up the sample with the password "infected". Use ZipCrypto and be sure to write down the password in the email too. A subject line like False positive - <program name> is preferred, as several vendors have automatic email rules for this.

Conditions / priority / contributing

Only submission methods that require no active license, registration, download of a tool is listed. Anything not fulfilling this goes to the Wall of Shame. For ones that do have one of these, online forms are preferred over emails. If the email is linked on their website, the link is preferred since it contains format information.

Table

Product How to submit
Acronis https://kb.acronis.com/content/62189
Ad-Aware https://www.adaware.com/report-false-positives
AhnLab-V3 v3sos@ahnlab.com
ALYac esrc@estsecurity.com
Antiy-AVL https://www.antiy.net/contacts/
SecureAge APEX https://uav.secureage.com/falsepositive/
Arcabit virus@arcabit.com
Avast https://www.avast.com/false-positive-file-form.php
AVG https://www.avg.com/en-us/false-positive-file-form
Avira https://www.avira.com/en/analysis/submit
BitDefender https://www.bitdefender.com/consumer/support/answer/40673/
Bkav fpreport@bkav.com, bkav@bkav.com, bkav@bkav.com.vn
CAT-QuickHeal https://www.quickheal.com/submitticket/
Certego fp@certego.net
ClamAV https://www.clamav.net/reports/fp or https://www.immunet.com/false_positive
CMC vulambang@cmcinfosec.com, support.is@cmclab.net
Comodo https://www.comodo.com/home/internet-security/submit.php falsepositive@avlab.comodo.com
CrowdStrike Falcon VTscanner@crowdstrike.com
Cybereason vt-feedback@cybereason.com
Cylance https://web.archive.org/web/20190929165253/https://home-support.cylance.com/hc/en-us/articles/360026236014-FAQ-VirusTotal-Inquiry
Cyren https://www.cyren.com/support/reporting-av-misclassifications
DeepInstinct info@deepinstinct.com
DrWeb https://vms.drweb.com/sendvirus/
eGambit https://tehtris.com/en/false-positive-negative-requests/
Elastic https://discuss.elastic.co/t/submitting-false-positives/232322
Emsisoft fp@emsisoft.com
eScan fp@escanav.com
ESET-NOD32 https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab#SubmitFile
F-Secure https://www.f-secure.com/en/business/support-and-downloads/submit-a-sample
FireEye virustotal@fireeye.com
Fortinet submitvirus@fortinet.com
GData https://su.gdatasoftware.com/us/sample-submission/
Gridinsoft https://anti-malware.gridinsoft.com/false-detect/
Ikarus probe@ikarus.at
Jiangmin virus@jiangmin.com
K7AntiVirus / K7GW support@k7computing.com
Kaspersky https://opentip.kaspersky.com/
Lionic https://www.lionic.com/reportfp/
MAX (SaintSecurity) root@malwares.com
MaxSecure tech@maxpcsecure.com (with program)
McAfee virus_research@avertlabs.com
McAfee-GW-Edition virus_research_gateway@avertlabs.com
Microsoft avsubmit@submit.microsoft.com (or login only)
NANO-Antivirus https://www.nanoav.pro/index.php?option=com_content&view=article&id=15&Itemid=83&lang=en
Palo Alto vt-pan-false-positive@paloaltonetworks.com
Panda https://www.pandasecurity.com/usa/homeusers/support/contact.htm?ts=1
Qihoo-360 https://www.360totalsecurity.com/en/suspicion/false-positive/
Rising http://mailcenter.rising.com.cn/filecheck_en/
Sangfor Engine Zero save@sangfor.com.cn
SentinelOne report@sentinelone.com
Sophos samples@sophos.com
Symantec https://symsubmit.symantec.com/
Tachyon isarc@inca.co.kr (include detection name)
Tencent TAVfp@tencent.com
Trapmine fp@trapmine.com
Trustlook bd@trustlook.com
TrendMicro https://www.trendmicro.com/en_us/about/legal/detection-reevaluation.html
VBA32 feedback@anti-virus.by
VirIT https://www.tgsoft.it/clienti/inviaFile.asp
VIPRE https://www.vipre.com/support/submit-false-positive/
ViRobot viruslab@hauri.co.kr
WebRoot https://www.webroot.com/us/en/business/support/vendor-dispute-contact-us
Zillya antivirus@zillya.com
ZoneAlarm https://opentip.kaspersky.com/
Zoner false@zonerantivirus.com

Sources

I'd like to thank these sites for providing valuable information: