MS Forefront False Positive Adware:Win32/Hotbar

[Direwolf20]

Wasn't sure if I should post this in security or OS, so chose here .

Anyone who uses Forefront should be aware that the Adware: Win32/Hotbar is a false positive.

Not sure if it affects home users, but our network is getting a lot of these alerts today, so I checked into it and found this: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Adware:Win32/Hotbar

On July 20, 2011, a temporary file related to a Microsoft definition update was incorrectly detected as Adware:Win32/Hotbar. On July 21, 2011 Microsoft released a new signature that addresses the issue. Signature versions 1.109.88.0 and higher include this fix.

 

[bigdogchris]

LOL ... Microsoft flagged their own files as malware?

 

[Direwolf20]

Yea, it was kind of comical watching the event logs.

Forefront is updating
You have a virus
Forefront encountered an error while trying to update.

 

[Chuklr]

Wasn't sure if I should post this in security or OS, so chose here .

Anyone who uses Forefront should be aware that the Adware: Win32/Hotbar is a false positive.

Not sure if it affects home users, but our network is getting a lot of these alerts today, so I checked into it and found this: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Adware:Win32/Hotbar

Hi, Direwolf20,

MSE flagged that file on both of my systems this morning. I just had it remove it and carried on ...

Chuklr

 

[Direwolf20]

Yea, it was just a temp file associated with the update, so whether you clean it or ignore it, its fine either way .