False positive for adobe reader

[maxamillion]

Hi, 

This morning I started getting block on Adobe reader when I try to send an email.

I have added AcroRd32.exe to the exception list but it makes no difference so I have had to disable anti-exploit for the time being.

The error happens regardless of adobe reader DC or Adobe Reader XI

TIA.

 

 

expolit.txt

[Rsullinger]

Hey Maxamillion,

 

I want to have you collect a couple of logs from our program that will give me a bit more information on that alert. To do this, collect these two files from these locations:

 

C:\ProgramData\Malwarebytes\MBAMService\mbae-default.log
C:\ProgramData\Malwarebytes\MBAMService\logs\MBAMSERVICE.log

The directory is hidden by default so you might have to click on "View -> Hidden items" in Explorer to see it.   
There is also a post here from Microsoft on how to do this for the more recent OS: https://support.microsoft.com/en-us/help/14201/windows-show-hidden-files

Go ahead and attach them here and I will take a look at them further! 

 

[maxamillion]

Hi Ron,

 

Thanks for the reply.

Sorry for taking so long to get back, I wasn't following the thread.(I'll do better next time, promise)

 

Attached are the two files as requested.

Note this only happens on one PC.

Regards

Malcolm

mbae-default.zip

MBAMSERVICE.zip

[Rsullinger]

Hey Malcom,

 

Thank you for the logs. I am going to have you collect me some debug logging for this type of alert. I will be sending you a PM with the instructions.