Submitting Virus samples to Microsoft RRS feed

  • General discussion

  • There are 2 scenarios:

    1. Windows Live OneCare detects a file as infected, but the customer is 100% sure that the file is NOT infected = False Positive
    2. Windows Live OneCare does NOT detect a file that is infected, or has been identified as infected by a third party tool = False Negative.

    Microsoft will work to analyze and add the file to the signatures, but you will not be contacted by anyone from Microsoft when you follow this process.  You should not contact support to follow up on these submissions except if help is needed to manually remove the virus in the interim, until the Windows Live OneCare signatures are updated.

    The 2 articles that describe this process are as follows:

    1. False Negative:  http://support.microsoft.com/kb/921161/en-us

    For help with removal, please contact OneCare support.

    How to reach support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1183028&SiteID=2


    Thursday, August 24, 2006 12:43 AM