These vendors don't provide a free and registration-less way to submit false positives via HTTP or e-mail.
- Alibaba (virustotal@list.alibaba-inc.com rejected my mail as spam)
- Baidu (bav@baidu.com bounces with user not found #1)
- Cynet (soc@cynet.com is unresponsive)
- Kingsoft (operation@cmcm.com bounces with user not found #3)
- Malwarebytes (login only)
- SUPERAntiSpyware (via program interface)
- TotalDefense (can submit via landline call WTF??)
- Yandex (yandex-antivir@support.yandex.ru rejects mails #4)
Most vendors ask you to zip up the sample with the password "infected". Use ZipCrypto and be sure to write down the password in the email too. A subject line like False positive - <program name> is preferred, as several vendors have automatic email rules for this.
Only submission methods that require no active license, registration, download of a tool is listed. Anything not fulfilling this goes to the Wall of Shame. For ones that do have one of these, online forms are preferred over emails. If the email is linked on their website, the link is preferred since it contains format information.
I'd like to thank these sites for providing valuable information:
- https://github.com/slolife/antivirus-false-positive-reports
- https://www.starmessagesoftware.com/blog/report-submit-false-positive-antivirus-software
- https://www.techsupportalert.com/content/how-report-malware-or-false-positives-multiple-antivirus-vendors.htm
- https://pastebin.com/cj746RvK
- https://straighttips.blogspot.com/2019/12/virustotal-report-false-positives.html
- https://github.com/alternat0r/List-of-Antivirus-Labs-Email-for-Malware-Submission
- https://ifreework.com/blog/soobshhit-o-lozhnom-srabatyvanii-antivirusa-na-vash-sajt/
- https://pastebin.com/7p9M49s2
- https://support.virustotal.com/hc/en-us/articles/115002146809-Contributors
- https://github.com/yaronelh/False-Positive-Center
- https://bitcoinissafe.com/antivirus-contact-list