Microsoft thinks we'er a virus

[James]

Some Microsoft hotfixes stop our software working. I believe some poorly
thought out change they make in a hotfix scans through memory and thinks
whatever we're doing is a virus.
We are a genuine software house, are are doing nothing unusual.

What can people do in this case? What should I do to report this to Microsoft?

 

[Dave M]

James;

Although Windows Defender is not a Virus scanner, perhaps this will help
resolve your issues.

If you are the vendor of a product that you believe has been incorrectly
classified by Windows Defender, or if you have recently updated the
behavior of your product and want it reclassified, you can contact our
research division with your concerns.

http://www.microsoft.com/athome/security/spyware/software/isv/default.mspx

 

[Bill Sanderson]

Dave M has given the right route to take if Windows Defender calls out your
software for removal as spyware.

I'm not sure that's the case, given your description so far.

When you say "Some Microsoft hotfixes.." can you be more specific?

I don't know what avenues a software vendor has to try to clarify what is
happening in this kind of situation.

Before complaining too much, I'd want to be sure that my development staff
have been using only documented API's.

 

[James]

I did find an email link since posting this topic, that might be the right one:
https://support.microsoft.com/oas/default.aspx?gprid=6527

The KBs in question have both been where MS have messed with the RPC security.
Previously KB917736, more recently KB933729.
This topic was more asking for advice how to report this, as hopefully MS
with take this into account before coming up with another KB next month that
causes a problem again.

You can understand why MS is a bit secretive about the details of what goes
into these, but I think they're being over-zealous in this case.
It doesn't help when you don't know if they've fixed the bug with a later KB
without really telling anyone.

We are using ADO in com objects. We're not exactly delving into dark and
mysterious undocumented code.

 

[Bill Sanderson]

That link may be worth trying--but you may well have to persist to get past
the first-level responder.

Looking at the link brought something to mind: If your company has an MSDN
subscription, MSDN subscribers get guaranteed 24 hour response time in
certain monitored newsgroups--and that may be a better way into the
system,--if you can find a monitored group that relates to your technology
(sorry--I'm not a developer--I have a vague idea what you are talking
about--but it is pretty vague--other than scripting, and Office Basic, the
last code I wrote was in Cobol....)

Anyway--check the MSDN site for which groups are monitored, and post in a
technical group related to ADO or com?

I think you have to post from an email address which is associated with the
MSDN subscription.