Jump to content

Search the Community

Showing results for tags 'Word'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 21 results

  1. I have a premium subscription; everything has been working fine for many months. Today MB started blocking MS Word because of a payload exploit. Word opens, and then is immediately closed by MB, even before I open a file. So, it's an application thing, it seems, not a file issue. MB pointed to a file Roaming/Grammarly/Updates/GrammarlyAddInSetup6.7.139.exe. This is the normal location for Grammary updates, it seems. There were files in there going back a year with different version numbers. (Could be old exploits too, I suppose; but I doubt it.) I am running the latest version of Grammarly, of course. I checked the Word file I was trying to load with VirusTotal - clean. I did a full scan of my system - clean. I checked the Roaming/Updates/etc folder for the file reported by MB - the 6.7.139.exe file does not exist. I deleted the whole Grammarly/Updates/* folder just to be sure, in case the file was hidden (although I have hidden files showing). The problem still remains - when I boot Word, it is immediately closed by MB, even before I open any specific Word file. I have attached a screenshot of the error. I'm not sure what to do next; working in MS Word is my daily business, so my business is down, and I am blocked. Help! Thank you
  2. Thank you. I have updated as you instructed to version 3.4.5. Here is a more recent report of the same problem - the logs are not in order of date: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 3/30/18 Protection Event Time: 9:31 AM Log File: b31bcae0-33f4-11e8-9e3d-00ffe2d7811d.json Administrator: Yes -Software Information- Version: 3.4.4.2398 Components Version: 1.0.322 Update Package Version: 1.0.4544 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Exploit Details- File: 0 (No malicious items detected) Exploit: 1 Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0 -Exploit Data- Affected Application: Microsoft Office Word Protection Layer: Application Hardening Protection Technique: Exploit blocked by Bottom-Up ASLR Enforcement File Name: URL: (end) I will see if the new upade cures the problem - though it has been happening through several versions. I would be interested to know what this exploit data means is happening.
  3. Malwarebytes 3.4.4 keeps closing MS Word 2013 This happens most often when opening Word. But also while working on a document suddenlt Malwarebytes shuts it down. In either case Word has to either recreate the dot template, or recover the lost document if shut down while editing. I now have to close Malwarebytes while working on Word documents, which is my main work on the computer. Below is the report of the last instance: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 3/15/18 Protection Event Time: 12:55 PM Log File: 12eee160-2850-11e8-8c74-00ffe2d7811d.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.4366 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Exploit Details- File: 0 (No malicious items detected) Exploit: 1 Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0 -Exploit Data- Affected Application: Microsoft Office Word Protection Layer: Application Hardening Protection Technique: Exploit blocked by Bottom-Up ASLR Enforcement File Name: URL: (end) I would appreciate any advice.
  4. windows word has stopped working properly on my computer, i can open word but when it comes to saving the work page the program stops functioning, starts spooling then has to be crashed to exit. windows suggest this is an issue caused between malwarebytes & windows word and a solution is available as per below:
  5. I just updated to Windows version 1703 all was working fine with office 365 with Malewarebytes prior to the update now Malwarebytes blocks the opening of WINWORD.exe to create a document or the opening of any document saved to open with it. This is the word processor for MS OFFICE 365. After playing around a bit I could right click WINWORD.exe icon enter properties and click run as administrator. Obviously, a step I'd prefer not to have to take every time I want to create or open a document and doesn’t work to open .docx files or other file types set to open with WINWORD.exe I should add I opened windows settings and checked for updates other office programs are not affected such as, Outlook, one note publisher and excel which seems to open and work normally. Spoiler below contains Malwarebytes log file from two events when trying to open word documents. Norton version 22.11.0.41 Blocked FRST.exe and quarantined the app Filename: frst64.exe The log txt as follows: However I was able to take it out of quarantine, not thrilled about it, risk level duly noted and run the app to provide results here. Your help resolving this issue would be greatly appreciated Addition.txt FRST.txt logs.7z mb-check-results.zip
  6. After months of blaming Adobe and trying to find solutions, it appears the error I get when attempting to start any MS Office product only happens when Malwarebytes protection is turned on. When I turn off all protection the MS Office products start up fine. The error I'm getting is "The exception unknown software exception (0xe0000002) occurred in the application at location 0x000000007661B802" I have read issues people have had when saving docs but mine happens as soon as an office product is launched. Right now I have completely turned Malwarebytes. Thanks
  7. Office 2016, Malwarebytes Premium 3.1.2, Windows 10, no beta crap and everything up to date After losing quite a bit of work several times (it was a big problem), and then defaulting to Wordpad until I find my Corel Disc, I finally figured out what was going on. Then, I come here to see the thread detailing the issue has been closed because a couple of people stopped having issues. Well, the fix didn't work. With protection for Word and Excel disabled, I was able to "save" and "save as" a few times with little issue; but that's not good enough. Further investigation should be performed, and you might want to get on the phone with Microsoft to really hash out what's happening. As it sits, I must cease using the programs. I can't take the chance that my word processor will crap out or that Malwarebytes will encounter further issues. It's not just Word and Excel, but I haven't pinpointed it all and I've no intention of wasting the time at this point. Some work can't be re-typed after a faulty save; it's lost forever. I cannot afford that. Malwarebytes has been a nice warm fuzzy feeling for years now, but ever since 3.0 there have been too many problems. I've lost confidence in the software. So, in response to the closed thread: Don't count your chickens before they hatch. People might want to stop back in and avoid starting a new one, and few things are more frustrating than being arbitrarily denied access to a previous, yet potentially fruitful conversation. You had the single program that would stop anything and conflict with nothing. I'm not sure what's going on with 3.X, but it really needs to be sorted. These are critical failures.
  8. After loading Malwarebytes Premium (3.0). MS Excel and MS Word will no longer work/start/load. After clicking, it spins for several seconds and nothing, including no error message. This is consistent with MS Office 2010 and MS Office 2016. Uninstalling MB will solve the problem, looking for a permanent solution to continue using MB.
  9. I recently upgraded from my previous version of MB to 3.0.6. I have the premium version. Now I can't open Word, Excel or any of my saved documents unless I quit MB. What's the deal with this. Is there a fix?
  10. Starting this morning, I cannot open Microsoft Word (latest version of Office 365). MB closes the program and gives me this report: What is going on here? How can I resolve this? (I am already updated on MB with latest definitions and version)
  11. Hi, I'm quite new to this forum. Originally I'm a mac/linux user. Today one of my friends asked me for help. I spent all the day searching and researching. We even tried Avast antivirus, but no success. They have a Windows server 2008 in their small office and have a bunch of files shared on it. Since this morning, all word, excel and pdf files are opened and saved. Last modified date time of them shows that. Their extensions remained unchanged. When trying to open them on any of workstations (Windows 7) a message received saying that file encoding has changed. We even tried to upload them into Google drive and open them using cloud based software. Again unsuccessful. I also tried to use 'open and repair' in Microsoft Word. It didn't work too. Errors screenshots are attached. Thank you for your help in advance!
  12. Since upgrading Malwarebytes Pro from v2.2.1.1043 to v3 I have experienced problems with Office 365 being very slow to start and frequently freezing. I have set up Exclusions in Malwarebytes and whilst Office 365 opens more quickly now it is still very slow compared to what it was lke under v2.2.1043. As a test I have shut down Malwarebytes Pro v3 and that eliminates the problem. I have timed how long it takes to open Excel with and without Malware bytes and here are the results: - Without Malwarebytes: 1.5 seconds With Malwarebytes: 12.7 seconds Presently I cannot work efficiently with Malwarebytes Pro V3.0.6 so I have uninstalled it until you find a resolution to this issue.
  13. After installing Malwarebytes Anti-Ransomeware I ran into the issue that I could no longer Save files in Word 2013. Everytime I try it gives me this error "The save failed due to out of memory or disk space". I initially tried the methods only with registry tweaks, and unticking Missing References (but there were none), so then I started looking at recently installed software, and I just installed this program today. Once i turned off active protection the issue went away.... I hope it will be fixed in the next release.
  14. Last night I turned on my computer, and was unable to launch Outlook. Word also refused to open. When clicking on the shortcuts in the start menu, Windows gave me the "outlook.exe" could not be found, and gave me the option to browse for it. I started to think somehow Office had been removed, but found no evidence of that in the EventViewer. Eventually I came to the Anti-Ransomware window, looked in Quarantine, and found 3 registry keys that it had locked up. After restoring them, and rebooting, all is good and Office works again. Requested ZIP files are attached. Malwarebytes Anti-Ransomware.zip MBAMService logs.zip
  15. I just installed MBARW yesterday. Today I was working on a 40+ page Word document and all of a sudden MS Word and my document disappeared. Then a MBARW popup came up and said that WinWord.exe was quarantined and I needed to reboot to complete the action. I couldn't restore WinWord because MBARW said that an item can't be restored that has been marked for deletion on reboot. MBARW is a nice idea, but I think it needs some work before it goes public.
  16. Caught wind of the Beta via SpiceWorks and jumped on it. Less than 30 minutes after installing the program, it flags winword.exe as ransomware. I followed the instructions to reboot, disable and restore the file and it seems to be working without issue. Winword False Positive.zip
  17. I just opening a word file, and when I close it, something happends! MBAE report me the Word program has do the "Application Hardening" exploit. On the send report dialog box, it said it will be sending the "autosave" file. False positive? (file attached) test.docx
  18. So all of a sudden Anti-Exploit is shutting down Word and Excel (2013) When i start typing. I can click things in office, but type something on the keyboard and I get Exploit Attempt Blocked! No other information, this did not happen a few hours ago and i am very certain nothing got installed to cause this. It appears to be a false detection to me. Any ideas?
  19. My computer was infected with something malicious last week . I cannot open any of my Microsoft Word files . This means I've potentially lost everything! Any help from anybody out there would be most welcome! Many thanks
  20. Hi everyone, First time poster here and I thought I'd see if anyone in this community has had to deal with a similar issue and recover from it. Let me just say that the malware that caused this issue has been removed and dealt with and is no longer an issue. It is the cleanup process that I'm interested in. One of the users on our corporate network received a zip file that contained some malware that slipped through our AV protection. He of course thought it was legitimate and opened it up and then realized his mistake. He noticed soon after that Word and PDF docs on his desktop became encoded and unreadable, with Word prompting for the proper encoding to display the file. Adobe Acrobat simply said the file was damaged. After discovering this, isolating the file and removing it, we also noticed that the malware had scanned a network drive and began changing files on this network drive. Thankfully we caught it and stopped it before it did a whole lot of damage. I've been able to restore most files from backups but there are some that we cannot restore and now have some unreadable files. The malware itself was detected as a "Trojan.dropper" but otherwise MBAM and McAfee AV gave no specific name. It was located in the following directories (win 7) and had the following file names C:\Users\UISER\AppData\Roaming\Ecyzz\dejiis.exe C:\Users\USER\AppData\Local\Eiswoijjkbddzp.exe The 2nd file ran as a background process and when attempting to Taskkill the open process by ID number, it prompted a message on screen with the famous line from the Terminator movie, "I'll be back." I laugh about it now, but it wasn't funny at the time (smart @$$ hacker). It also wrote entries to the registry under HKEY_CURRENT_USER in both the Run and RunOnce keys so that it would load on startup. With the process running, it would automatically recreate the registry entries if you tried to delete them. So that's the malware info. Now for the damage it did. At first I thought it might be one of those new Crypto viruses that encrypt files using high-level encryption and ask for a ransom to get the key to unlock all files. It's not one of those thankfully. This piece of malware actually changes the contents of Word and PDF files, changing the encoding to display in what looks to be Asian characters some kind, according to Google translate, its Korean. I can provide a plain-text sample if anyone wants to check it out. I can open the Word files in plain text by changing the encoding type, which shows the Asian characters. So the files are accessible only changed. What I wanted to know is: Has anyone experienced this type of malware before? Searching online has not yielded very much information. Does anyone have good method of recovering files like this and reverting them back to their original form or at least recovering the data? I'm looking at a few different types of software, but so far tests have not worked. My fear is that the actual text has been deleted and replaced but my hope was that it was just changed and may be possible to recover. I translated a document on Google translate, which told me the language was Korean but all it came back with was more symbols in the translation. Any tips or information you might have would be helpful. Thanks!
  21. Windows 7 64-bit with Microsoft Office 2007. I only tried Microsoft Word, so I am unsure on the other executable and personal files: When attempting to open (double-click) a word file (for example, from the Desktop), I get the message, "There was a problem sending the command to the program." Word will open, but the docx file I clicked on does not open. Stopping or exiting MAE resolves the issue. Also, opening Word, then loading my docx file within Word also resolves the issue, and this will work with MAE running. I have a Microsoft Problem Steps Recorder view of the issue upon request.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.