What Do I Do If an Engine Detects My Safe File as a Threat?

Metascan Online, the fastest cloud-based multi-scanning solution, not only increases the likelihood of detecting malware but also provides a mechanism for identifying false positives based on the detection ratio among 40 anti-malware engines.

Metascan Online automatically shares potential false positives with the anti-malware engine vendor when the detection ratio is lower than a specified threshold (unless you are using the private API or host Metascan yourself). However, if you believe any of the engines falsely detected your file as a threat, you can help the vendor improve their detection rates by submitting your file to the vendor manually using the links below:

AegisLab - http://www.aegislab.com/Support/

Agnitum - http://www.agnitum.com/support/contact.php

Ahnlab - http://global.ahnlab.com/site/support/supportMain.do

Antiy - Submit false positive to submit@antiy.com.

AVG - http://samplesubmit.avg.com/us-en/false-detection

Avira - http://analysis.avira.com/samples/index.php

Baidu - http://antivirus.baidu.com/en/submit-file.php

BitDefender - http://www.bitdefender.com/support/contact-us.html

ByteHero - Submit false positive to support@bytehero.com.

ClamWin - http://www.clamav.net/lang/en/sendvirus/submit-fp/

Commtouch -

Use Winzip to zip and encrypt the file with the password of "virusvirus" without quotes. Email the file to virus@authentium.com with the password to the zip in the body of the email.

Emsisoft - Create a new thread and submit file in this forum.

ESET - http://support.eset.com/kb141/?locale=en_US

F-prot - http://www.f-prot.com/virusinfo/false_positive_form.html

F-secure - https://analysis.f-secure.com/portal/login.html

Filseclab - Submit false positive to fp@filseclab.com.

Fortinet - http://www.fortiguard.com/antivirus/submit.html

Hauri - http://www.hauri.net/support/virus_report.html

Ikarus - Submit false positive to false-positive@ikarus.at.

Jiangmin - Submit false positive to support@jiangmin.com.

K7 - Submit false positive to support@k7computing.com.

Kaspersky Lab - http://support.kaspersky.com/virlab/helpdesk.html

Kingsoft - Create a new thread and submit file in this forum.

Lavasoft - Submit false positive to http://www.lavasoft.com/support/securitycenter/report_false_positives.php

McAfee-Gateway - http://www.mcafee.com/us/mcafee-labs/resources/how-to-submit-sample.aspx

Microsoft - https://www.microsoft.com/security/portal/Submission/Submit.aspx

NANO - http://www.nanoav.ru/index.php?option=com_content&view=article&id=15&Itemid=53

Norman - Submit false positive to http://www.norman.com/business/support/support_tools/potential_false_postive_virus_alarm

nProtect - Submit false positive to support@nprotect.com.

Quickheal - http://www.quickheal.com/submitticket

Sophos - https://secure2.sophos.com/en-us/support/contact-support/sample-submission.aspx

SUPERAnti-Spyware - Create a new thread and submit file in this forum.

Symantec - https://submit.symantec.com/false_positive/

ThreatTrack - http://www.threattracksecurity.com/resources/submissions.aspx

TotalDefense - Submit false positive to totaldefense@iyogi.net.

TrendMicro - http://www.trendmicro.com/us/about-us/detection-reevaluation/index.html

TrendMicroHouseCall - http://esupport.trendmicro.com/solution/en-us/1037634.aspx

VirIT - http://www.tgsoft.it/italy/file_sospetti.asp

VirusBlokAda - Submit false positive to support-en@anti-virus.by

Xvirus - http://www.mysecuritywin.com/submit.html

Zillya! - http://zillya.com/node/30

Zoner - http://www.zonerantivirus.cz/zaslani-vzorku-k-overeni

Sign up for Blog updates
Get information and insight from the leaders in advanced threat prevention.