topic Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132) in General Topics

Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

depps — Wed, 14 Aug 2024 08:30:43 GMT

Seeing hundreds of alerts relating to a teams msix and this threat signature - Virus/Win32.WGeneric.ejjvpg(656943132)

Any one else experiencing this?

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

RomainSalmon — Wed, 14 Aug 2024 09:01:36 GMT

Hello i m experiencing the same but i do not have yet incidents concerning this. The traffic is decrypted and i can see this file blocked : calling_electron_bundle.js

Do you have outages ? Have you opened a tac case ?

Regards

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

NidhiPoddar — Wed, 14 Aug 2024 12:55:20 GMT

Hello, Yes we are also experiencing the same. It is a False Positive & generating unnecessary alerts. Hope PA fixes the signature asap

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

sidnyc — Wed, 14 Aug 2024 14:00:42 GMT

the same issue here, is Palo Alto releasing a new Signature

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

depps — Wed, 14 Aug 2024 14:06:20 GMT

Ive disabled the signature for now but it would be good to know when its fixed so i an re-enable

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

sidnyc — Wed, 14 Aug 2024 14:08:04 GMT

it looks like Palo Alto just release a new AV signature 4910-5428

Re: Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

ErinWest — Wed, 14 Aug 2024 15:40:52 GMT

We are seeing this as well. Will check for a new threat signature update.