OfficeClickToRun Infected?

I'm getting this notification 4 times every 30 minutes. I guessing that something has been infected and is trying to download something which BitDefender is blocking.

I am doing a scan now, but nothing reported so far. Are the downloads being prevented? TIA

We blocked this dangerous page for your protection: http://151.205.20.7/data/03641eeb6228617e/officecdn.microsoft.com/db/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32.cab Accessed by: officeclicktorun.exe Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

Find more posts tagged with

Comments

Mark957

Update to my previous post

1. Stopping the Microsoft OfficeClickToRun Service stopped the notifications

2. The first occurrence began after a BitDefender Update this morning

3. A BitDefender scan did not reveal any issues.

4. A 3rd party scan did not find anything

5. There was another BitDefender update

6. I restarted the OfficeClickToRun Service, no new notifications have been issued since the update noted in 5.

At this point I am assuming this was a false positive caused by the early morning update and fixed by the later update.

Please advise if there are any other steps I should take. TIA

Mark957

And it's back this morning, after the first update of the day.

Roxana G

Hello Mark957,

We recommend you to send us a Bdsys log at the email address bitsy@bitdefender.com in order to investigate the reason you receive these notifications:

https://www.bitdefender.com/consumer/support/answer/1922/

Mark957

Thanks for your response.

I opened a ticket this morning and a Bdsys.log file has been provided.

Roxana G

22 hours ago, Mark957 said:

Thanks for your response.

I opened a ticket this morning and a Bdsys.log file has been provided.

Hello,

The log was sent to our Virus Labs. Once our team receives the results, an email will be sent to you.

Mark957

The issue has been resolved as a false positive.

Thanks for the fast response!