Microsoft KB Archive/921159

= How to submit to Microsoft false-positive files and false-positive software that Windows Live OneCare identifies either as infected with a virus or as spyware =

Article ID: 921159

Article Last Modified on 9/10/2007

-

APPLIES TO


 * Windows Live OneCare

-





INTRODUCTION
Microsoft Windows Live OneCare may identify files and software either as infected with a virus or as spyware. This article describes how to submit to Microsoft any false-positive files or software.



MORE INFORMATION
Consider the following scenario. Windows Live OneCare may identify a file as infected with a virus or as spyware. However, you are positive that the file is not infected or is not malicious software. In this scenario, we recommend that you send an e-mail message to Microsoft, together with the false-positive file.

To compress the false-positive file in an archive and to submit it to Microsoft, do the following.

Submit false-positive virus files
Compress the false-positive virus files in an archive, and then submit the archive to the following e-mail address:

onecare@submit.microsoft.com

To do this, follow these steps:  In Microsoft Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder. Type fp-virus.zip for the new compressed folder name, and then press ENTER. Drag the false-positive virus files into the archive the same way you would drag them into a Windows folder. Double-click the zipped folder to open it. On the File menu, click Add a Password. In the Password box, type infected . In the Confirm Password box, type infected again.</li> Compose a new e-mail message by using any e-mail program that lets you attach files to the message.</li> In the To line, type the following e-mail address:

onecare@submit.microsoft.com

</li> In the Subject line, type the following subject:

False Positive: Virus

</li> In the body of the message, include the following information: <ul> Any details about why you think that the file is not infected</li> Any details about other applications that you used to confirm that the file is not infected</li> Any information about where you might have downloaded this file</li></ul> </li> Attach to the message the archive, fp-virus.zip, that you created in step 2.</li> Send the message.</li></ol>

Submit false-positive spyware files
Compress the false-positive spyware files in an archive, and then submit the archive to following e-mail address:

windefend@submit.microsoft.com

To do this, follow these steps: <ol> In Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder.</li> Type fp-spyware.zip for the new compressed folder name, and then press ENTER.</li> Drag the false-positive spyware files into the archive the same way you would drag them into a Windows folder.</li> Double-click the zipped folder to open it.</li> On the File menu, click Add a Password.</li> In the Password box, type infected .</li> <li>In the Confirm Password box, type infected again.</li> <li>Compose a new e-mail message by using any e-mail program that lets you attach files to the message.</li> <li>In the To line, type the following e-mail address:

windefend@submit.microsoft.com

</li> <li>In the Subject line, type the following subject:

False Positive: Spyware

</li> <li>In the body of the message, include the following information: <ul> <li>Any details about why you think that the file is not spyware</li> <li>Any details about other applications that you used to confirm that the file is not spyware</li> <li>Any information about where you might have downloaded this program or about what other program might have installed it</li></ul> </li> <li>Attach to the message the archive, fp-spyware.zip, that you created in step 2.</li> <li>Send the message.</li></ol>

Keywords: kbhowto kbpubtypekc kbmsnpartnerportal kbexpertisebeginner kbmsnqwestportal kbantivirus KB921159

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.