GShelton

Still fighting this issue. I have to close out of MalwareBytes to be able to access the control panel for my Contour Shuttle. Does any of this information help? -Log Details- Protection Event Date: 6/23/22 Protection Event Time: 4:25 PM Log File: 89fb1b14-f332-11ec-8f79-b06ebfc145ba.json -Software Information- Version: 4.5.9.198 Components Version: 1.0.1699 Update Package Version: 1.0.56423 License: Premium -System Information- OS: Windows 10 (Build 19044.1766) CPU: x64 File System: NTFS User: System -Exploit Details- File: 0 (No malicious items detected) Exploit: 1 Malware.Exploit.Agent.Generic, C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe Shell32.dll,Control_RunDLL C:\Program Files (x86)\Contour Shuttle\ContourShuttle.cpl, Blocked, 0, 392684, 0.0.0, , -Exploit Data- Affected Application: Windows Control Panel Protection Layer: Application Behavior Protection Protection Technique: Exploit Office loading points abuse blocked File Name: C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe Shell32.dll,Control_RunDLL C:\Program Files (x86)\Contour Shuttle\ContourShuttle.cpl URL: (end)

Thank you for the reply. Unfortunately, that did not make any change to the situation.

I just purchased a Contour Shuttle Pro V2. (https://www.contourdesign.com) Software/drivers installed fine but when I attempt to run the control panel (where you configure what the buttons do) I get a popup from Malwarebytes and it quarantines the "C:\Program Files (x86)\Contour Shuttle\ContourShuttle.cpl" file. If I exit from Malwarebytes, the program runs fine. I have put that file in the allow list, no change. I have put the entire folder in the allow list, no change. Please let me know if you need more info. Any help will be greatly appreciated.