Forum Discussion
Ivan54
Apr 26, 2017Bronze Contributor
Threat Explorer: ATT0000x.htm Attachments / VBS/Jenxcus!lnk Malware / what is happening here?
So I'm taking a closer look at the new security center and noticed the following issue repeating. User receives email with attachments (in this case 2 PDFs) - all is good - the attachments are ...
- May 04, 2017Ivan, thanks for pointing this out to us. What happened was that one of our anti-malware engines had a false positive verdict on a few instances of this file. Not knowing it was a false positive, an automated process added the file hash for that attachment to our "possible malware" list and that's why the messages are showing up as both "Delivered " and "malware". We started fixing up most of the environment in North America last week but we're still working on marking this file as clean so that it appears "good" for all future instances.
VasilMichev
Apr 26, 2017MVP
Well, the question is do you trust Apple/the Mail app? :)
Open a case to report this I guess, or use one of the methods mentioned in this FAQ to submit it as false positive: https://technet.microsoft.com/en-us/library/mt789012(v=exchg.150).aspx
- Ivan54Apr 27, 2017Bronze Contributor
So you would agree it is a false positive :P ?