blocking Federated website

[KellyS]

Malware has started blocking our fednat website - I have added it to the exclusions, but it is still blocking it.  Some users have no issues yet, but the others are slowly starting to have the problem.  I now have 3 users that are blocked

https://agents.fednat.com/

 

https://federated.live.ptsapp.com/default.cfm

 

Log Details-

Protection Event Date: 3/28/17

Protection Event Time: 2:25 PM

Logfile:

Administrator: Yes

 

-Software Information-

Version: 3.0.6.1469

Components Version: 1.0.75

Update Package Version: 1.0.1615

License: Premium

 

-System Information-

OS: Windows 10

CPU: x64

File System: NTFS

User: System

 

-Exploit Details-

File: 0

(No malicious items detected)

 

Exploit: 1

Malware.Exploit.Agent.Generic, , Blocked, [0], [-1],0.0.0

 

-Exploit Data-

Affected Application: Internet Explorer (and add-ons)

Protection Layer: Application Hardening

Protection Technique: Attempt to execute VBScript blocked

File Name: C:\Windows\SysWOW64\vbscript.dll

URL:

 

[Arthi]

Hi KellyS,

Welcome to the forum !!

On your Malwarbytes application, please go to the "Settings" menu on the left->"Protection" Tab->"Advanced Settings" under Exploit protection and turn off "Disable Internet Explorer VB Scripting" checkbox for browsers. 

Let me know if that works. Thanks.

[MysteryFCM]

Moved from Website Protection F/P reports to a more appropriate forum.

[KellyS]

Thank You Arthi !!!  I changed the settings & it worked

[Telos]

On 5/1/2017 at 6:53 PM, Arthi said:

turn off "Disable Internet Explorer VB Scripting" checkbox for browsers

That might be a workaround, but it reduces malware protection. It would be better to whitelist the site? Or?