Send a suspicious file to the Doctor Web Anti-virus Laboratory

In order to make your anti-virus protection even more reliable, the Doctor Web Virus Monitoring Service collects and analyzes malware samples from all over the world. You can also help improve anti-virus security. Use the web form below to submit a suspicious file, presumably a virus, or a clean file that Dr.Web’s heuristic analyzer or Origins Tracing has identified as so-called “false positive.”

Analysts from the Virus monitoring service have to work with hundreds of submissions every day. Unfortunately some of the submitted files turn out to be clean which means that virus monitoring staff periodically take on unnecessary work. Please try to make sure that the file you plan to send could really be a virus.

Sometimes several users send the same virus for analysis simultaneously. This also adds to the workload of our laboratory staff. In these instances, the entry added to the Dr.Web virus database is based on the first submission.

An automatic preprocessing system speeds submissions processing. Given that submissions are sorted by category, the system’s efficiency strongly depends on users selecting the appropriate category. Submissions containing viruses that have already been sent in by other users and added to the virus database will be processed automatically. A corresponding report will be generated and sent to the user.

In order for us to guarantee a reply to your request, please fill in the below form carefully.
Provide a link
Please include only one file per submission, unless you think several files are related to the same viral manifestation. If sending a password-protected archive, please specify the password in the Comments field.
Submission category:	select Suspicious file A virus not detected by Dr.Web False detection False detection by Dr.Web heuristic analyzer False detection by Origins Tracing™ Request for curing
Before submitting a request, we strongly recommend that you review category descriptions. Please remember that choosing the most appropriate category will speed processing.
Your e-mail:
If you specify your e-mail address, your results will be sent to that address.
Comments Use the Comments field to enter any additional information about a suspicious file. The more details you provide, the sooner we will be able to process your submission. If you send us a password-protected archive, please specify the password in this field.