"Exploit attempt to bypass ASLR blocked" Causing excel to crash

[hongh]

Lately I've been getting complaints from users with their excel crashing and due to Antiexploit. The crash occurs when they are opening and working on their excel files and some user would experience their excel crashing when they have several excel files open and left idle between 15-45min. 

I check the email notifications for it and its all says "Exploit attempt to bypass ASLR blocked". From reading the forum I've uncheck "Bottumup ASLR Enforcement" for now for users that are experiencing excel crashing on them. 

anitexploitlog.zip

[hongh]

log for second user with issue

Malwarebytes Anti-Exploit log 2.zip

[pbust]

Can you please post FRST logs? Something may be conflicting with MBAE.

 

[hongh]

6 minutes ago, pbust said:

Can you please post FRST logs? Something may be conflicting with MBAE.

 

where would i find the FRST logs?

[pbust]

Check the "readme first" instructions in my signature.

 

[hongh]

1. 3 hours ago, hongh said:

   Lately I've been getting complaints from users with their excel crashing and due to Antiexploit. The crash occurs when they are opening and working on their excel files and some user would experience their excel crashing when they have several excel files open and left idle between 15-45min. 

   I check the email notifications for it and its all says "Exploit attempt to bypass ASLR blocked". From reading the forum I've uncheck "Bottumup ASLR Enforcement" for now for users that are experiencing excel crashing on them. 

   anitexploitlog.zip

   here is the FRST for the first user

frst.zip

[hongh]

3 hours ago, hongh said:

log for second user with issue

Malwarebytes Anti-Exploit log 2.zip

for second user

FRST2.zip

[pbust]

Can you please try the latest build from here?

https://forums.malwarebytes.org/topic/181797-latest-mbae-corporate-build/