I noticed that Avast has recently updated its FN/FP sample submission site (
https://www.avast.com/submit-a-sample), which looks nice. However, I have some questions and feedback on the updated sample submission system:
1. Confusion description in "Report False Negative" page:
A False Negative sample means an undetected but malicious file. However, as the attached screenshot shows, the guidelines state, "this process is for detected files only. Undetected files will not be processed." This is confusing and misleading because it contradicts the definition of a False Negative.
2. Support submitting multiple samples at once:
As the above Guideline shows, currently submitter can only submit one sample at one time. This can be inefficient when we have several samples to upload. It would be ideal if the system supported multiple sample submissions, similar to Avira, which allows up to five samples per submission.
3. No response after FP submission?
Previously, Avast did not send replies for FN submissions but did provide results for FP submissions, which was acceptable. However, it now appears that Avast does not send any feedback for either FN or FP submissions. This lack of response is problematic because feedback for FP submissions is necessary to confirm that the false positives have been addressed and let user know if it's ok to restore the detected files from Quarantine.