How to submit suspected viruses and spyware to Microsoft

This article describes how to submit suspected viruses and spyware to Microsoft.

To submit suspected viruses and spyware to Microsoft, use the following methods.

Submit suspected viruses

Compress the suspected viruses in an archive, and then submit the archive to the following e-mail address:To do this, follow these steps:

1. In Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder.
2. Type fn-virus.zip for the new compressed folder name, and then press ENTER.
3. Drag the suspected viruses into the archive just as you would drag them into a Windows folder.
4. Double-click the zipped folder to open it.
5. On the File menu, click Add a Password.
6. In the Password box, type infected.
7. In the Confirm Password box, retype infected again.
8. Compose a new e-mail message by using any e-mail program that lets you attach files to the message.
9. In the To line, type the following e-mail address:
   onecare@submit.microsoft.com
10. In the Subject line, type the following subject:
    False Negative: Virus
11. In the body of the message, include the following information:
    • Any details about why you think the file is a virus or some other potentially malicious software
    • Any information about where you might have downloaded this file
    • Any information about what the virus name might be and about whether another application detected the unwanted software
12. Attach to the message the fn-virus.zip archive file that you created in step 2.
13. Send the message.

Submit suspected spyware

Compress the suspected spyware files in an archive, and then submit the archive to the following e-mail address: To do this, follow these steps:

1. In Windows Explorer, right-click a blank area in an open folder or on the desktop, point to New, and then click Compressed (zipped) Folder.
2. Type fn-spyware.zip for the new compressed folder name, and then press ENTER.
3. Drag the suspected spyware files into the archive just as you would drag them into a Windows folder.
4. Double-click the zipped folder to open it.
5. On the File menu, click Add a Password.
6. In the Password box, retype infected.
7. In the Confirm Password box, type infected again.
8. Compose a new e-mail message by using any e-mail program that lets you attach files to the message.
9. In the To line, type the following e-mail address:
   windefend@submit.microsoft.com
10. In the Subject line, type the following subject:
    False Negative: Spyware
11. In the body of the message, include the following information:
    • Any details about why you think the file is spyware or some other potentially malicious software
    • Any information about where you might have downloaded this file or about what other program might have installed it
12. Attach to the message the fn-spyware.zip archive file that you created in step 2.
13. Send the message.