Is it better to submit samples to FSecure directly or Avira? Avira response seems very fast.
I mean, you can do both but realistically speaking you are a F-Secure customer and the whole point of Avira selling their engine SDK to F-Secure is to not take on the load of all of their downstream engine users. Also, F-Secure may choose to have an engine other than Avira handle the threat you report.
I think that's an important distinction about F-Secure. Unlike certain AVs that contain a third party engine which does almost everything (e.g. ZoneAlarm with Kaspersky), in F-Secure's world, the signature scanner plays an important role but IMO not dominantly so for the kind of emerging threats being tested by these tests or the Hub. A big part of that protection comes from F-Secure Cloud, their in-house Hydra engine (which has been providing most of the Office VBS / macro virus detections seen in the Hub), and of course DeepGuard.