Amdrink

I've now added Excel to the Allow List to stop future Ransomware detections.

My Excel has triggered this again today. It was working after the 1st whitelist fix. Excel.exe file zipped and attached. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 6/29/20 Protection Event Time: 2:35 PM Log File: f84f5e42-b9c1-11ea-8ffc-0cdd242dfe9b.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.955 Update Package Version: 1.0.26133 License: Premium -System Information- OS: Windows 10 (Build 18362.900) CPU: x64 File System: NTFS User: System -Ransomware Details- File: 1 Malware.Ransom.Agent.Generic, C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE, Blocked, 0, 392685, 0.0.0 (end) 200629-EXCEL.zip

Firefox is installed to C drive "C:\Program Files\Mozilla Firefox\firefox.exe"

Upon running the Support Tools, my Firefox was also hit with a Malware.Ransom.Agent.Generic alert and crashed. Log attached. Support tool log attached after a clean restart from above event. mbst-grab-results.zip mwb-log-firefox.txt

Impressive. Thanks Rich.

See the zipped Excel.exe attached. EXCEL.zip

Thanks Porthos.

When editing multiple excel files, MWB Teams is detecting a Ransomware infection. When scanning PC, no infection is found. Does not happen immediately upon opening file, it is when saving the file after multiple edits. No previous issues with this file, it's been used 100's of times over the last 2 years. Excel version Microsoft 365 MSO (16.0.12827.20328) 64-bit malwarebytes-log.txt Order Form - 2019.xlsx