So here's the deal, I could never login on my desktop to skype for business. Since I am an microsoft 365 admin, I issued a ticket and waited for someone to call me to help me login. He remotely logged in to my computer was able to view my screen. After about thirty minutes of changing different settings on the admin page and clearing the Lync cache, I was instructed to download skype for business basic on my computer through the 'install apps' portal on office 365 admin portal. I already had office 365 installed and skype installed through my school account, so when testing I was simplying logging out and logging back in. After the install of skype for basic was complete (for my account I could not log into) I tried logging in and nothing. We tried troubleshooting and nothing. Finally I suggested that I try on my mobile device, and I got an interesting pop up message after being able to successfully login (note we had tried on desktop about 8 times and I reset my password). Here is the message I received: I knew that something was wrong with this certificate so I emailed to my self from my phone and showed him on my screen. He then told me that this is nothing like he has seen before and since this certificate was not issued by godaddy or microsoft he couldn't do anything about it. He then told me to hit the continue button and try to login. After doing so I was finally able to login successfully on my mobile phone and on my desktop. I still felt like I messed up big time by accepting a Fake certificate. After the call was finished I ran a couple scans, both on my desktop and on my phone and something came up.
C:\Users\Downloads\setupskypeforbusinessentryretail.x64.en-us_.exe ... is Suspicious !!!
Apparently McAfee GetSusp found it as a Boot Sector Virus. I then checked the time stamp of when I downloaded and it was during the call, the same time he told me download skype for business basic. I also ran another scan and this came up under a MBR scan: Here are the VirusTotal results:
MD5 676846aea84c661c7bc62d8bdac7eb29 SHA-1 fbe8bef191dc31c73e4a5a50ba42f3b0d4e01dc3 SHA-256 7f60396d152b58215d2f677656f0ef0887f9fa6645c34d503c5f0efd18d84e55 Authentihash ac082088fcead28338527fb6c961c78445c6ef14dd9c08793a6f30fe51af7f7a Imphash 2e6b765f5c8cfe7892bc03c3c50ab319 File Type Win32 EXE Magic PE32+ executable for MS Windows (GUI) Mono/.Net assembly SSDeep 49152:ZVa6fmdbtYpIJBDV8/hSvTOHPjb44K8brLgLF3Q9QCa1BLk2Hyus5+iIe2tk9QMz:S0kSfyF87t+7PMr2FwY2sM TRiD Win64 Executable (generic) (87.3%) Generic Win/DOS Executable (6.3%) DOS Executable Generic (6.3%) File Size 6.85 MB File Names: setupskypeforbusinessentryretail.x64.en-us_.exe Bootstrapper.exe
So did Microsoft give me a MBR Virus or did I fall for a man in the middle attack on my mobile?