-
Posts
201 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Everything posted by REGITDept
-
I appreciated all the replies. Here is my question, when you have Excel + the Bluebeam 2019 add-on then everything still works fine. Just a combination of certain Excel files + Excel + Bluebeam 2019 add-on will create this issue. Why is that? Thanks.
-
Dear MB Community, MB Supports are unable to help me (Case # 4263358), so I wanted to share the issue with the community about this in case someone else out there are having the same problem. The issue: Our users are encountering Exploit blocked "Exploit.OfficeSpawningBatchComm" when viewing certain Excel files. I have tracked it down and found out that when the users have Bluebeam 2019 add-on "BluebeamExcelLinkAddIn" for Excel it will caused MB to block. We do not want to exclude this detection from our policies such as turning off "Protection for Office spawning batch commands" because what if a malicious hacker is taking advantage of this? Attached you will find the Debug Logs for MB on one of the many affected clients. Thanks. MWB_REGSVSOLIS.REG.LOCAL_Diag_2023_06_05_17_03_09.zip MWB_REGSVSOLIS.REG.LOCAL_Diag_2023_05_30_14_58_37.zip
-
-
Dear MB, This is a FP: hxxp://www.cobrawire.com Thanks.
-
Thank you. Ticket created.
-
Dear MB, We are trying to exclude the 3 alerts regarding the Google Chrome update policy. Please let us know what we did wrong because the exclusions are not working. Thank you. Also, we are unable to create new Support Ticket from the Nebula console. FYI.
-
Patch Management - Push Custom Application
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Thank you AlexSmith 😀 -
Dear MB, The Patch Management feature is still very buggy with many failed update installed software. Screenshot included as an example. Ticket already opened on 05/02/2022 but still no answer yet. Thanks.
-
Dear MB, Does the Patch Management have the feature to push out custom application? Thanks.
-
Dear Malwarebytes, We believed this to be a false positive. Please verify. Thanks. cookconcreteproducts.com.
-
FP: Excel 2016 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
I just got their email today. I'm concern that instead of having the issue fix on MB's side. The workaround is to lessen the security on our side. That's not reassuring at all. Thanks. -
Dear MB, Another user is effected. The client is using MS Office 2016 - 32 Bit. Thanks. Malwarebytes Diagnostics.zip
-
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Here is the new ticket number 3578792. Thanks. -
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Good morning AdvancedSetup, The issue came back this morning. Attached are the logs you requested. Thanks. Malwarebytes Diagnostics.zip -
Dear MB, I believed these are FP. Please see attached files. If you need the installer please PM me for the download link. Thanks. FP Detections.txt 411012371_MalwarebytesDiagnostics.zip
-
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Dear AdvancedSetup, I'm unable to reproduce the issue to grab you the logs. Perhaps it was fixed? Thanks. -
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
This will have to be next week because the user is already off for the week. Thanks. -
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Thank you AdvancedSetup. Happy Friday and Weekend! -
FP: Excel 2013 - Exploit automatically blocked
REGITDept replied to REGITDept's topic in Malwarebytes Nebula
Dear AdvancedSetup, The ticket number is 3571909. Thanks. -
Dear MB, One of our user encountered the Exploit blocked whenever he opened this Excel file. He is using MS Excel 2013 (32 bit) with latest updates. Windows 10 Pro (64 bit). Screenshots and Logs are included. Thanks. 210829 TIME (HEATH).zip Logs.zip
-
Sorry for the late reply. One of my team member couldn't find the file. Today I was able to find some time to dig and find the file for you. Looks like it was already fixed because I no longer see it being detected? Thanks. RTNIC_DELL_INST.zip
-
-
Thank you Atribune.
-
-
Dear Malwarebytes, Referencing previous post: FP: hxxps://www.batterysystems.net - Website Blocking - Malwarebytes Forums As of today 06/21/2021 the website hxxps://www.batterysystems.net is still being blocked. Thanks.