How to submit to Microsoft false-positive files and false-positive software that Windows Live OneCare identifies either as infected with a virus or as spyware (921159)

MORE INFORMATION

Consider the following scenario. Windows Live OneCare may identify a file as infected with a virus or as spyware. However, you are positive that the file is not infected or is not malicious software. In this scenario, we recommend that you send an e-mail message to Microsoft, together with the false-positive file.

To compress the false-positive file in an archive and to submit it to Microsoft, do the following.

Submit false-positive virus files

Compress the false-positive virus files in an archive, and then submit the archive to the following e-mail address:To do this, follow these steps:

1. In Microsoft Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder.
2. Type fp-virus.zip for the new compressed folder name, and then press ENTER.
3. Drag the false-positive virus files into the archive the same way you would drag them into a Windows folder.
4. Double-click the zipped folder to open it.
5. On the File menu, click Add a Password.
6. In the Password box, type infected.
7. In the Confirm Password box, type infected again.
8. Compose a new e-mail message by using any e-mail program that lets you attach files to the message.
9. In the To line, type the following e-mail address:

   onecare@submit.microsoft.com

10. In the Subject line, type the following subject:

    False Positive: Virus

11. In the body of the message, include the following information:
    • Any details about why you think that the file is not infected
    • Any details about other applications that you used to confirm that the file is not infected
    • Any information about where you might have downloaded this file
12. Attach to the message the archive, fp-virus.zip, that you created in step 2.
13. Send the message.

Submit false-positive spyware files

Compress the false-positive spyware files in an archive, and then submit the archive to following e-mail address:To do this, follow these steps:

1. In Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder.
2. Type fp-spyware.zip for the new compressed folder name, and then press ENTER.
3. Drag the false-positive spyware files into the archive the same way you would drag them into a Windows folder.
4. Double-click the zipped folder to open it.
5. On the File menu, click Add a Password.
6. In the Password box, type infected.
7. In the Confirm Password box, type infected again.
8. Compose a new e-mail message by using any e-mail program that lets you attach files to the message.
9. In the To line, type the following e-mail address:

   windefend@submit.microsoft.com

10. In the Subject line, type the following subject:

    False Positive: Spyware

11. In the body of the message, include the following information:
    • Any details about why you think that the file is not spyware
    • Any details about other applications that you used to confirm that the file is not spyware
    • Any information about where you might have downloaded this program or about what other program might have installed it
12. Attach to the message the archive, fp-spyware.zip, that you created in step 2.
13. Send the message.