I had an Excel Addin with No updates suddenly started showing as an exploit and blocked. Details of exploit are:
Malwarebytes
www.malwarebytes.com
-Log Details-
Protection Event Date: 9/16/21
Protection Event Time: 5:57 PM
Log File: 6ba9b2f6-1741-11ec-9bdc-00fffc453cb8.json
-Software Information-
Version: 4.4.6.132
Components Version: 1.0.1453
Update Package Version: 1.0.45000
License: Premium
-System Information-
OS: Windows 10 (Build 19043.1237)
CPU: x64
File System: NTFS
User: System
-Exploit Details-
File: 0
(No malicious items detected)
Exploit: 1
Malware.Exploit.Agent.Generic, C:\Program Files\Microsoft Office\root\Office16\WScript.Shell, Blocked, 0, 392684, 0.0.0, ,
-Exploit Data-
Affected Application: Microsoft Office Excel
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office VBE7 object abuse blocked
File Name: C:\Program Files\Microsoft Office\root\Office16\WScript.Shell
URL:
(End)
WScript.Shell does not show in the directory:
I have tried excluding Excel.exe, the directory: C:\Program Files\Microsoft Office\root\Office16\, and the program C:Windows\System\Wscript.exe but nothing works.
How do I fix this?