Hi
I just moved from hosted exchange to O365 for my email. I have set up a new account in outlook and imported my old .pst file and all my emails / contacts etc are now in one place which is great. Office online and the iPad mail has no problems with my email however the local Outlook 2021 application has been getting the same notification from KTS web anti-virus since this move, here is an example: (I've removed the specific MailboxId details, MD5 hash and computer username and replaced with "***")
Today, 18/02/2023 11:28:25;Download denied;Microsoft Outlook;OUTLOOK.EXE;C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE;C:\Program Files\Microsoft Office\root\Office16;20852;***\***;Active user;Blocked;Blocked;Trojan-Downloader.VBS.Agent.bce;Trojan;High;Exactly;https://outlook.office365.com/mapi/emsmdb/?MailboxId=***//x-mso//macros///rakinku;rakinku;https://outlook.office365.com/mapi/emsmdb/?MailboxId=***//x-mso//macros//;File;Databases
Today, 18/02/2023 11:28:25;Malicious object detected;Microsoft Outlook;OUTLOOK.EXE;C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE;C:\Program Files\Microsoft Office\root\Office16;20852;***\***;Active user;Detected;Detected;Trojan-Downloader.VBS.Agent.bce;Trojan;High;Exactly;https://outlook.office365.com/mapi/emsmdb/?MailboxId=***//x-mso//macros///rakinku;rakinku;https://outlook.office365.com/mapi/emsmdb/?MailboxId=***//x-mso//macros//;File;Databases
Event: Download denied
User: ***\***
User type: Active user
Application name: OUTLOOK.EXE
Application path: C:\Program Files\Microsoft Office\root\Office16
Component: Web Anti-Virus
Result description: Blocked
Type: Trojan
Name: Trojan-Downloader.VBS.Agent.bce
Precision: Exactly
Threat level: High
Object type: File
Object name: rakinku
Object path: https://outlook.office365.com/mapi/emsmdb/?MailboxId=***//x-mso//macros//
MD5: ***
Reason: Databases
Databases release date: Today, 18/02/2023 07:25:00
My version of KTS is 21.3.10.391 (j)
I've also noticed that Outlook is now not connected to the exchange server. I have updated my computer and office and rebooted and still the same issue occurs.
Can anyone advise what this is and what to do with it please?
Thanks very much
