Update to CU14, Defender findet Virus

[ChaS 0]

moin,

seit dem Update auf CU14 meldet der Defender einen Virus bei der w3wp.exe

 

 

Microsoft Defender Antivirus has detected malware or other potentially unwanted software.

 For more information please see the following:

https://go.microsoft.com/fwlink/?linkid=37020&name=Exploit:Script/ExchgProxyRequest.A!gen&threatid=2147834423&enterprise=0

                Name: Exploit:Script/ExchgProxyRequest.A!gen

                ID: 2147834423

                Severity: Severe

                Category: Exploit

                Path: amsi:_\Device\HarddiskVolume4\Windows\System32\inetsrv\w3wp.exe

                Detection Origin: Unknown

                Detection Type: Concrete

                Detection Source: AMSI

                User: NT AUTHORITY\SYSTEM

                Process Name: C:\Windows\System32\inetsrv\w3wp.exe

                Security intelligence Version: AV: 1.405.278.0, AS: 1.405.278.0, NIS: 1.405.278.0

                Engine Version: AM: 1.1.24010.10, NIS: 1.1.24010.10

bearbeitet 20. Februar von ChaS