Author Topic: Constant "threat secured" driving me insane  (Read 3894 times)

0 Members and 1 Guest are viewing this topic.

Offline awyn717

  • Newbie
  • *
  • Posts: 2
Constant "threat secured" driving me insane
« on: March 03, 2022, 12:05:15 AM »
Starting today, every 2-5 minutes Avast is letting me know that it's secured whatever threat this is:

aborted connection to 1d.tlu.dl.delivery.mp.microsoft.com
because it was infected with Win32:Malware-gen

WHAT DOES THIS MEAN?! and why can't I have even 6 minutes of peace?

Help, please and thanks!

Offline peter.k

  • Newbie
  • *
  • Posts: 3
Re: Constant "threat secured" driving me insane
« Reply #1 on: March 03, 2022, 12:25:21 AM »
I have the same problem !!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86803
  • No support PMs thanks
Re: Constant "threat secured" driving me insane
« Reply #2 on: March 03, 2022, 12:27:15 AM »
Quote from: awyn717
why can't I have even 6 minutes of peace?

Because something on your system is trying to connect to that URL, which for some strange reason Avast considers malicious.

A Google search on that URL returns many hits - https://www.google.co.uk/search?q=1d.tlu.dl.delivery.mp.microsoft.com - do any of them ring a bell.

Quote from: Extract of one of the hits
Description. *.tlu.dl.delivery.mp.microsoft.com. HTTP. Used to download operating system patches, updates, and apps from Microsoft Store.

So it looks like some of your apps from the Microsoft Store are phoning home looking for updates.
A screenshot of the Avast Alert window with the More Details option expanded could help determine what is making the connection and which shield is alerting.  Attach it to your next post using the Attachments and other options link below the reply window (see mine, click to expand).

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86803
  • No support PMs thanks
Re: Constant "threat secured" driving me insane
« Reply #3 on: March 03, 2022, 12:32:40 AM »
I have the same problem !!

I have reported this to Avast by another means for investigation, but it won't hurt to use the link I gave in my last post to report it as a possible false positive.

I'm not currently seeing this but I haven't downloaded any programs or apps from the Microsoft Store.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline peter.k

  • Newbie
  • *
  • Posts: 3
Re: Constant "threat secured" driving me insane
« Reply #4 on: March 03, 2022, 12:45:23 AM »
Thanks David

Attached is a screen shot of the message I'm receiving.

Offline awyn717

  • Newbie
  • *
  • Posts: 2
Re: Constant "threat secured" driving me insane
« Reply #5 on: March 03, 2022, 01:10:08 AM »
My popup is exactly the same as peter.k's when expanded. I don't know what app it could be, but is there a way I can make it stop popping up? Can I tell Avast that it's not a threat?


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86803
  • No support PMs thanks
Re: Constant "threat secured" driving me insane
« Reply #6 on: March 03, 2022, 01:10:38 AM »
Thanks David

Attached is a screen shot of the message I'm receiving.

You're welcome.

Given it is initiated by svchost.exe a Windows System file which should be digitally signed it is likely to be a False Positive and you should report it using the link I gave.

I Have to say that the latter part of the URL information is strange to me YourPhone.Contracts.Fre.winmd, does it ring any bells for you ?

The URL in your alerts is slightly different to the OPs post '1d.tlu.dl.delivery.mp.' were yours is '2.tlu.dl.delivery.mp.' possibly indicating a different app/function. However the OP hasn't posted any screenshots.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86803
  • No support PMs thanks
Re: Constant "threat secured" driving me insane
« Reply #7 on: March 03, 2022, 01:16:35 AM »
My popup is exactly the same as peter.k's when expanded. I don't know what app it could be, but is there a way I can make it stop popping up? Can I tell Avast that it's not a threat?

Given what I said in my reply to peter.k there is a slight difference in the initial part of the URL, so I would suspect that the later part of the URL /filestreaming/service/files will also be different. However it is the initial URL path that is causing the problem and you should also report this as a possible false positive.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline rwaters

  • Jr. Member
  • **
  • Posts: 84
Re: Constant "threat secured" driving me insane
« Reply #8 on: March 03, 2022, 01:33:24 AM »
I'm seeing the same alert, as I'm sure many others are who haven't reported it. Can someone from Avast acknowledge that this is a false positive and that it will be fixed with a new signature update (and soon)?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86803
  • No support PMs thanks
Re: Constant "threat secured" driving me insane
« Reply #9 on: March 03, 2022, 02:08:57 AM »
Using the link given is the best way to report this (the more the better, the squeaky wheel gets the oil) as it goes to the virus labs rather than hope that one of the avast team sees this topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline peter.k

  • Newbie
  • *
  • Posts: 3
Re: Constant "threat secured" driving me insane
« Reply #10 on: March 03, 2022, 04:54:55 AM »
>Using the link given is the best way to report this (the more the better, the squeaky wheel gets the oil) as it goes to the virus labs rather than hope that one of the avast team sees this topic.

Done

But I'm still concerned.

Maybe its a false positive, but at the same time I'm suspicious of the word "Contracts" at the end of the URL. This should probably be "Contacts". Its the kind of spelling error often seen in scam documents of "non-English speaking" origin.

Offline GreenMachine

  • Newbie
  • *
  • Posts: 1
Re: Constant "threat secured" driving me insane
« Reply #11 on: March 03, 2022, 05:22:32 AM »
Now I know this might seem random but here is a quick idea that I think has helped me narrow down what is causing this issue.

1. Go into the Microsoft Store app
2. Go to library
3. Select the get updates buttons (it's towards the top right of the window if I remember correctly)

At this point you should notice that the "Your Phone" app is refusing to update and it triggers the issue that we are noticing. It would appear that this is being caused by the interaction between Avast and the Your Phone app. More than likely this is a false positive. If it wasn't Microsoft would have made an egregious error as if I am not mistaken the Microsoft Store automatically updates some of the apps that come with Windows. Are you folks running free or premium Avast is the next question?

Offline YellowPC

  • Newbie
  • *
  • Posts: 2
Re: Constant "threat secured" driving me insane
« Reply #12 on: March 03, 2022, 06:28:43 AM »
I got similar message which pops up every few minutes. Reported it to Avast.

Offline raggordy

  • Newbie
  • *
  • Posts: 1
Re: Constant "threat secured" driving me insane
« Reply #13 on: March 03, 2022, 08:14:12 AM »
Been having the same issue and can confirm as per GreenMachine post that it is the my phone app. ive got silent mode running for now untill Avast takes a look at the issue.

ive also reported a false positive as per DavidR first suggestion.

glad im not the only one with the issue, as its been a long day and the only search results were either from two to five years ago and I was about to lose it.

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2266
Re: Constant "threat secured" driving me insane
« Reply #14 on: March 03, 2022, 08:55:34 AM »
Hello,
thank you for the report. It is false positive, we will fix it.

Milos