How to Report Malicious Files
Found a malicious file? Here's where to report it and how to get it flagged by antivirus vendors.
Introduction
Viruses, malware, and malicious files generally refer to the same thing: a file designed to harm the device that runs it, or the person using it. This guide explains where to report a malicious file once you have found one, so it can be detected and blocked before it reaches anyone else.
Reporting to law enforcement
You should first report the file to your local law enforcement. Most governments do not offer a dedicated malware submission form, since their reporting channels tend to focus on phishing and fraud, but a report is still worth filing, particularly if the file caused you direct harm.
Reporting to antivirus vendors
You can also submit the file directly to several antivirus vendors and analysis platforms. Doing so helps their detection engines recognize the file and stops it from affecting other users.
- Upload the file to VirusTotal by visiting virustotal.com. This automatically shares threat intelligence with a wide range of security organizations.
- Submit the file to Microsoft Security Intelligence by visiting microsoft.com/en-us/wdsi/filesubmission. Once confirmed, the file will be detected on most Windows computers.
- Report the file to Bitdefender by visiting bitdefender.com/consumer/support/answer/29358.
- Report the file to Avast by visiting avast.com/en-us/report-false-negative.
Reporting the website distributing the file
If you found the file on a website, that website should be reported separately so it can be taken down. Our guide to reporting a malicious website walks through how to do that, including scanning the site and notifying its hosting provider.
Conclusion
Reporting a malicious file to law enforcement and to antivirus vendors helps get it detected and removed before it reaches anyone else. If the file came from a website, reporting that website as well closes off the source entirely.