Send a suspect file to the anti-virus laboratory for analysis

Decryption requests are submitted via the web form at support.drweb-av.pl/new/free_unlocker
It’s common for several users to send the same virus for analysis simultaneously. In these instances, the entry added to the Dr.Web virus database is based on the first submission.
Please include only one file per submission, unless you think several files are related to the same viral manifestation.
If sending a password-protected archive, please specify the password in the Comments field. The recommended password is 'virus'.
Before submitting a request, we strongly recommend that you review category descriptions. Please remember that choosing the most appropriate category will speed processing.
Requests made by Dr.Web users that contain serial numbers are given higher priority.

In order for us to guarantee a reply to your request, please fill in the below form carefully.

Provide a link

Please include only one file per submission, unless you think several files are related to the same viral manifestation. If sending a password-protected archive, please specify the password in the Comments field.

Submission category:

Before submitting a request, we strongly recommend that you review category descriptions. Please remember that choosing the most appropriate category will speed processing.

Your e-mail:

Your Dr.Web serial number

If you specify your e-mail address, your results will be sent to that address.

Comments

Use the Comments field to enter any additional information about a suspicious file. The more details you provide, the sooner we will be able to process your submission. If you send us a password-protected archive, please specify the password in this field.

JS.BtcMine.36	1.28%
SCRIPT.Virus	0.96%
Trojan.MulDrop.origin	0.96%
Adware.OpenCandy.238	0.86%
Adware.OpenCandy.152	0.86%