Microsoft false positive?
Here’s where to start.
Microsoft Security Intelligence accepts files that were incorrectly classified as malware or potentially unwanted applications.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
How to request a review
File review
Microsoft Security Intelligence accepts files that were incorrectly classified as malware or potentially unwanted applications.
- Open the submission portal, sign in and choose the appropriate submitter role; software publishers should choose Software developer.
- Select the affected product and the appropriate Incorrectly detected option. Attach the exact detected file and give its detection name, source and relevant context.
- Track the final determination in submission history. Developers disputing that result can use the contact form supplied with the results.
- Microsoft does not accept file samples by email.
- This route concerns file detections. Select the product actually responsible for the detection.
Names you may see in a report
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal contributor roster ↗
- VirusTotal file engine prefixes ↗
- VirusTotal official false-positive contact list ↗
- Submit files for analysis ↗
- Submit a file for malware analysis ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.