Article ID: 952163 - Last Review: April 9, 2010 - Revision: 3.0

How to submit malicious software files to Microsoft for analysis if you are using Forefront Server or Antigen products

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

On This Page

Expand all | Collapse all

SUMMARY

This article describes the methods that Microsoft Forefront Security, Microsoft Forefront Protection and Sybari Antigen customers can use to submit malicious software files to Microsoft for analysis. This article also describes how to prepare these files for submission.

MORE INFORMATION

You can use one of the following methods to submit malicious software files to Microsoft for analysis:
  • The Microsoft Malware Protection Center portal
  • Submission by Microsoft Customer Support Services

Malware Protection Center portal submission

To submit files that are suspected of containing malware or potentially unwanted software to Microsoft for analysis, visit the following Web site:
Microsoft Malware Protection Center (https://www.microsoft.com/security/portal/Submission/Submit.aspx)
At the submission portal, choose Microsoft Forefront Server Security as your product. Enter your Microsoft Software Assurance ID when you are prompted. This will make sure that your virus submission is given a higher priority assignment in our submission queue as compared to those anonymously submitted.

For more information on software assurance, visit the Microsoft Web site:
Software assurance information (https://www.microsoft.com/licensing/software-assurance/default.aspx)


Note In the Forefront Protection user interface, there is the “Submit Malware Sample” option under the Actions drop-down box. This option directly links you to the Malware Protection Center portal.

Submission by Microsoft Customer Support Services

Microsoft Customer Support Services can submit files on your behalf. If you have an urgent malicious software situation that Forefront Server Security or Antigen does not address, we recommend that you contact Customer Support Services for help. To do this, use the support information that was provided to you when you purchased Forefront Server Security. Or, visit the following Microsoft Web site:
http://support.microsoft.com/select/?target=hub (http://support.microsoft.com/select/?target=hub)

APPLIES TO
  • Microsoft Forefront Security for SharePoint
  • Microsoft Forefront Security for Exchange Server
  • Microsoft Antigen 9.0 for Exchange
  • Microsoft Antigen for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 8.0 for IM
  • Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
Keywords: 
kbexpertiseinter kbhowto kbinfo KB952163