ITAl 0 Posted September 18 Share Posted September 18 On 9/15/23, Windows Defender detected Emotet!pz on two different Excel spreadsheets on two complete separate computers/networks. At the time, neither workstation had Eset NOD32 installed. After installing NOD32 and restoring the one of the flagged files, Eset found no infection in suspected file and the entire workstation scanned clean. I suspect this is a false positive from Windows Defender? Anyone else experience this? I've used Eset for many years and trust its protection. Thank you! Al Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted September 18 Administrators Share Posted September 18 Please check the file at https://www.virustotal.com and post a link to scan results here. Quote Link to comment Share on other sites More sharing options...
ITAl 0 Posted September 18 Author Share Posted September 18 2 minutes ago, Marcos said: Please check the file at www.virustotal.com and post a link to scan results here. I'd love to Marcos, but they contain personal information. Thank you! Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted September 18 Administrators Share Posted September 18 If you create a copy and remove all personal information is it still detected? Quote Link to comment Share on other sites More sharing options...
ITAl 0 Posted September 18 Author Share Posted September 18 23 minutes ago, Marcos said: If you create a copy and remove all personal information is it still detected? If it really is infected, is it wise to open the file, activating the malicious code? Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted September 18 Administrators Share Posted September 18 Please compress the file, encrypt it with the password "infected" and supply it to me via a private message. You can also send it to samples[at]eset.com. Quote Link to comment Share on other sites More sharing options...
ITAl 0 Posted September 18 Author Share Posted September 18 29 minutes ago, Marcos said: Please compress the file, encrypt it with the password "infected" and supply it to me via a private message. You can also send it to samples[at]eset.com. Please check your PMs. FYI - it's not password protected. Thank you! Quote Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 4,841 Posted September 18 Administrators Solution Share Posted September 18 We confirm it's a false positive by Microsoft. Nightowl 1 Quote Link to comment Share on other sites More sharing options...
ITAl 0 Posted September 18 Author Share Posted September 18 8 minutes ago, Marcos said: We confirm it's a false positive by Microsoft. THANK YOU! I surprised others haven't run in this. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.