How to report malicious files to Avast?

Hello,

I’m using Avast from a few months and I like it. There is a file on my PC which I thought to be malicious. When I scanned with Avast, there were no problems. But if I scan with ClamWin Portable, it says that the file is a TrojanDropper. The file is surely malicious and I’m planning to report this but I couldnot find any option in Avast/Avast’s website to report any malicious file that is not currently detected by Avast [or maybe I’m blind;) ].

Where can I report malicious files to Avast?

Thanks…
AmbrNewlearner

You may zip the file and password protect it, then email it to virus@avast.com with the password in the body of the message.

You may also try uploading it to http://www.virustotal.com and verifying that it’s not a false positive.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.

Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

Hello,

I had reported the file to avast.

Here is virustotal’s report.

Thanks for the help…
AmbrNewlearner

Thanks for helping to improve detections.

Welcome to the forums.

Hello,

Last weekend I lost the battle (Avast too by the way).
While unpacking an audiobook, I missed the .exe on the first file in a set of .rar files… Within moments by PC was totally infected.
In the registry there was a entry in the HKCU/Software/Microsoft/Windows/current version/Run called Kell.
When trying to delete it, it would re-appear instantaneously after refreshing…

This PC is a Windows Vista Ultimate with Avast 4.8 Pro. My management is running on Windows Home Server. Since this PC acts as a Vista Media Center, it’s always on, so Avast updates continously…

Avast kicked in, trying to block the files, but did not manage to keep the PC safe. I used WHS backup/restore to do a system restore to the day before so PC is up and running again (for once actually something that did what it should do)…

My question - I’d like to send this virus to Avast for diagnostic and educational purposes (as described in this thread), but I would like to stay informed about what the hell that thing was that made me work until 1:30 last night… How does this work ? I’m quite curious…

Thanks,
Mario

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.

Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

You are normally only contacted by Alwil if they need more information.

You could upload the fire to some on-line analysis (not just multiple scanners like virustotal) and they analyse exactly what it does.

  1. http://anubis.iseclab.org/?action=home
  2. http://camas.comodo.com/cgi-bin/submit

The give a fairly comprehensive analysis on the binary file.