First published: 31st August 2007
We recently received an email that started, "As incredible as it meight be, there is no simple way to report a new virus to either of the major vendors (nod32, symantec, mcaffee, etc, etc). So i just found your email on the wild list." This is incredicle, because we know all the major vendors provide ways for people to submit samples. Unfortunately, the message contained a brief description of what the supposed virus did, but no sample.
So, let us clarify how to report a possible new virus to an anti-virus developer in the most effective way:
- Have you updated your anti-virus software? Check whether the latest available update for your anti-virus software detects and/or disinfects the suspected virus.
- You need to provide a sample. The developer examines new viruses (or other malware) to understand how they work, how to detect them and how to remove them. A report of a new virus without a sample is almost useless, it will not result in a virus definition that can detect and remove the virus. If you do not know how to collect a sample, contact your technical support or your anti-virus vendor's technical support, they can help you.
- Choose a report method. Some anti-virus software includes an integrated feature to help you submit samples, and all the major vendors have instructions on their websites (see links below).
- Don't make multiple submissions. The major anti-virus developers all share virus samples, because they recognise that viruses are like a public health issue, and that, by giving samples to their commercial competitors, the customers they are protecting are their own. Submit your sample to your own anti-virus vendor, if it is a new virus, they will send it to the others.
- Include relevant information. Say why you suspect these files, what you observed when the incident occurred, and your system information: operating system and version, anti-virus software type, version and virus definitions date/version, and the name and version of any software that seemed to be involved. Include the report of your anti-virus software, if there is one.
- Don't Panic.
Is that clear? Here are those submission links: