Jump to content
Jay-Dee

False positives? Started 20200210

Recommended Posts

Hi! Today I'm receiving multiple blocks while not actively using any applications. Some of them refer to \Skypeapp.exe

on domain said lgin.msa.trafficmanager.net ( not login ! )

IP addresses seem to belong to Microsoft: 

40.90.137.126

40.90.137.120

It pops up on my PC every couple minutes. Should I exclude it?

Thanks!

image.png

Share this post


Link to post
Share on other sites
Just now, Jay-Dee said:

It pops up on my PC every couple minutes. Should I exclude it?

It is a false positive and has been corrected in the following database. Please update you database manually and for good measure restart the computer.

 

Update MB.png

  •  

Share this post


Link to post
Share on other sites

Hi @Porthos! Thanks for your suggestion. I had correct database - needed restart. BTW - My PC was started couple hours ago ;) It is ok now.

Share this post


Link to post
Share on other sites

Hi @Porthos. 

I was too happy too early. After restarting it is still recognizing different IP:

image.thumb.png.bf6b0d2c003e2517528b4e1a20784904.png

Thanks!

Share this post


Link to post
Share on other sites

Greetings. This False Positive was fixed in the following databases:

MBAM2 Version: v2020.02.10.1  
MBAM3 Version: 1.0.14739
MBAM4 Version: 1.0.19000

Please check for updates and this block should no longer occur.

Edited by tetonbob

Share this post


Link to post
Share on other sites

Thanks it is gone. The only issue I noticed is the fact, that sometimes updates do not happen automatically. I have a scan running every hour, and update wasn't reported or applied. The weird thing is that to access schedule I need to click on date (???) and there are no intermediate steps between 1 hour and 1 day.

 

Share this post


Link to post
Share on other sites
5 hours ago, Jay-Dee said:

I have a scan running every hour

To be honest that is overkill.  Also scans will not run when computer is off or sleeping.

 

5 hours ago, Jay-Dee said:

to access schedule I need to click on date (???) and there are no intermediate steps between 1 hour and 1 day.

Default check for updates is one hour if not changed. Hourly is enough. Still as before if computer is off or sleeping no action.

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.