Reoccurring -> Application name: HxOutlook.exe; Component: Web Anti-Virus; Result description: Blocked

[7777777]

Hi there!  I hope all is well. 

System: Windows 10 Professional; latest patched to date (2/8/23)

Kaspersky details: Kaspersky Internet Security 21.3.10.391 (j)

 

Just started getting regular Kaspersky messages up, particularly when I use my standard Windows mail client (that comes with Windows 10)...and they look like this:

Event: Access denied
User: <MyWin10UserNameHere>
User type: Active user
Application name: HxOutlook.exe
Application path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21256.0_x64__8wekyb3d8bbwe
Component: Web Anti-Virus
Result description: Blocked
Type: Threat of data loss
Name: http://clicks.mg.vastika.com/o/eJwdjssOwiAQAL9GbpJdFhY48C2GVysqaQPV77dpMpnjZGpAtoYMWe9ECSYWr5xoQYEiOIUMhFZS9BETJyx5Sa7qm4a-yl-cR3tHmbcunkF7tkwOXKKaNCysknUIaNi7jGTFqMujlaDZGzHCa0tTjjq_vU65j23uNR_zDK89ts_VPK6NO6iTP0CNMEg
Precision: Exactly
Threat level: High
Object type: Web page
Object name: eJwdjssOwiAQAL9GbpJdFhY48C2GVysqaQPV77dpMpnjZGpAtoYMWe9ECSYWr5xoQYEiOIUMhFZS9BETJyx5Sa7qm4a-yl-cR3tHmbcunkF7tkwOXKKaNCysknUIaNi7jGTFqMujlaDZGzHCa0tTjjq_vU65j23uNR_zDK89ts_VPK6NO6iTP0CNMEg
Object path: http://clicks.mg.vastika.com/o
Reason: Databases
Databases release date: Today, 2/6/2023 12:46:00 PM

 

After spending a few hours on this, I removed the Windows Store Apps for Microsoft Outlook, which I believed would solve this issue.  I don't remember putting this app on my machine, in the first place...assumed that something installed it.  I believe the "vastika.com" website that is referenced in the above message came via a job board, whilst reading a job description.  However, I am still getting this message, and usually about 3-4 times in a row...then it stops.

Any idea what this is?  Any idea what my options are aimed at getting rid of it? I believe I have another image, but do not want to contaminate my backup disk, if this is a nasty bugger that jumps around.

I do not see any HxOutlook.exe running in Task Manager.  Not sure if I have something bad on my dev box or if something is trying to make it so, and Kaspersky is kicking it out.  However, the regularity (ie 3-4 times; stops for a while; comes back) is nagging and I'd obviously like to keep something worse off my machine.

I have also attached Web Anti-Virus messages via the Kaspersky Interface. 

Thanks very kindly for reading this.  Cheers on that. ?

 

[Igor Kurzin]

Hi @7777777, hang on, please, we are checking with malware analysts. 

[Igor Kurzin]

The URL was confirmed to be a false positive, it has been removed from the database of malicious websites. 

[7777777]

Thanks, Igor.  Glad we could team on this and take care of it.  Cheers!  ?