OnSite 0 Posted March 6, 2023 Share Posted March 6, 2023 Every time an Office app (Excel, Word, Outlook, etc) is started, Eset NOD32 shows a popup saying it has blocked access to autodiscover.365e.live site. I've made scannig also with other antivirus without finding any malware or suspicious file. Is it a false positive or a legid warning? Thank you Link to comment Share on other sites More sharing options...
OnSite 0 Posted March 6, 2023 Author Share Posted March 6, 2023 also 365e.live .... Link to comment Share on other sites More sharing options...
Administrators Marcos 5,392 Posted March 6, 2023 Administrators Share Posted March 6, 2023 The domains are for sale but that's not the only reason for blocking. We'll keep the block as we don't see any good reason to remove it. Link to comment Share on other sites More sharing options...
OnSite 0 Posted March 6, 2023 Author Share Posted March 6, 2023 And why any Office app try the connection with theese sites? Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 206 Posted March 6, 2023 Most Valued Members Share Posted March 6, 2023 (edited) 4 hours ago, OnSite said: Every time an Office app (Excel, Word, Outlook, etc) is started, Eset NOD32 shows a popup saying it has blocked access to autodiscover.365e.live site. I've made scannig also with other antivirus without finding any malware or suspicious file. Is it a false positive or a legid warning? Thank you Several companies have it as Malicious as per VT scan : https://www.virustotal.com/gui/url/a8f8b7141634a4b58fd47c3669a6c306c10c384bb0fc175d53d3773a74c5921a?nocache=1 Are you using a crack on your Office program? , it could be that Also accessing the link will be blocked by uBlock Origin as it contains ad/trackers inside etc.. So ESET's block isn't false. Edited March 6, 2023 by Nightowl Link to comment Share on other sites More sharing options...
OnSite 0 Posted March 6, 2023 Author Share Posted March 6, 2023 1 hour ago, Nightowl said: Several companies have it as Malicious as per VT scan : https://www.virustotal.com/gui/url/a8f8b7141634a4b58fd47c3669a6c306c10c384bb0fc175d53d3773a74c5921a?nocache=1 Are you using a crack on your Office program? , it could be that Also accessing the link will be blocked by uBlock Origin as it contains ad/trackers inside etc.. So ESET's block isn't false. No. I'm using a legid, licensed copy of Microsoft Office 365. And for that reason I find this thing strange and that I have done scans with various antivirus looking for some malware, without finding anything. Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 206 Posted March 7, 2023 Most Valued Members Share Posted March 7, 2023 14 hours ago, OnSite said: No. I'm using a legid, licensed copy of Microsoft Office 365. And for that reason I find this thing strange and that I have done scans with various antivirus looking for some malware, without finding anything. It's weird , I thought it might be a crack that is trying to communicate with a weird website like this one here. Assuming you have scanned your computer and no threat is detected , and assuming that this domain wasn't bought by Microsoft suddenly , I believe there is something wrong that 365 is trying to communicate there Doing a whois search to Microsoft.com will show you that the domain is registered to Microsoft Doing a whois to the domain 365e.live shows it's privacy hidden and registered by different registrar and doesn't belong to Microsoft. Link to comment Share on other sites More sharing options...
Recommended Posts