Is d.docs.live.net a Virus? How to Fix OneDrive Renaming Files
Question details
Users are seeing 'd.docs.live.net' associated with their files, leading to concerns that it might be a virus renaming their documents.

- Product
- Microsoft Office / OneDrive
- Device & OS
- not provided
- Scenario
- Opening, saving, or synchronizing Office files linked to a Microsoft OneDrive account.
- Observed behavior
- Files appear with a 'd.docs.live.net' path instead of a standard local drive path, and in some cases, file names may appear changed or unusual.
Before troubleshooting, ensure you have backed up any critical documents by saving a copy locally to your computer's hard drive.
Verify OneDrive Synchronization and Save Files Locally
Confirm if the files are stored in OneDrive and temporarily pause synchronization to prevent further unwanted renaming or path confusion.
The address 'd.docs.live.net' is not a virus. It is a legitimate server address used by Microsoft OneDrive to sync Office documents. Seeing this means your file is opening directly from the cloud rather than your local storage.
Look at your system tray (taskbar) in the bottom right corner of your screen to see if the OneDrive cloud icon is active and syncing files.
Open the affected document in your Office application, click 'File', select 'Save As', and choose a local folder (like Documents or Desktop) to save it without cloud syncing.
Click the OneDrive icon in the taskbar, select the 'Help & Settings' gear icon, and choose 'Pause syncing' to temporarily stop cloud updates while you verify your file names.

Switch to WPS Office for Seamless Local Document Management
If forced Microsoft Office and OneDrive synchronization is causing confusion with addresses like d.docs.live.net, consider WPS Office. It provides a lightweight, easy-to-use alternative with clear local saving options, ensuring you always know exactly where your files are stored without unexpected path changes.
- 1. Download WPS Office: Visit the official website to download and install the free WPS Office suite on your device.
- 2. Open Your Files: Double-click your local documents to open them directly; WPS Office seamlessly opens all your existing Word, Excel, and PowerPoint files.
- 3. Save Locally by Default: Easily save your documents to your local hard drive by default, ensuring full control over your file paths without confusing background syncing.

Frequently Asked Questions
Why do my Word documents show d.docs.live.net?
This indicates the document is stored in Microsoft OneDrive and is being opened directly from the Microsoft cloud servers rather than your local hard drive.
Can a virus disguise itself as d.docs.live.net?
While malware can hide in many ways, the specific path d.docs.live.net is an official Microsoft server. If you only see this in your Office recent files or save dialogs, it is normal OneDrive behavior, not a virus.
How do I stop files from saving to d.docs.live.net?
You can change your default save location. In your Office application, go to File > Options > Save, check the box for 'Save to Computer by default', and specify a local default file location.




