Jump to content

Malwarebytes insists on blocking a vbscript I need to su


Recommended Posts

All of a sudden, Malwarebytes insists on blocking a vbscript I coded and use a lot, the name of which is "inputBox wscript.popup_aaa.vbs", and it's attached to this posting in a rar file.

I added the vbscript to my Malwarebytes exclusions, and I even excluded the entire directory:

image.png.485d77d3af7c7ced2bccd15fb3ac6350.png

 

But Malwarebytes continues blocking the script, and announces that it  blocked the "exploit".  

I need to get Malwarebytes to stop blocking the script.  Any help would be much appreciated.  I can't continue to use Malwarebytes if I can't use the vbscripts I have coded, even though I love the protection Malwarebytes provides.

Here's the Malwarebytes "exploit" report:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/14/18
Protection Event Time: 1:14 PM
Log File: 3820f5f0-ffe5-11e8-a8a1-ac220bbf9628.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.508
Update Package Version: 1.0.8325
License: Premium

-System Information-
OS: Windows 10 (Build 17134.471)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\System32\WScript.exe C:\WINDOWS\System32\WScript.exe E:\Apps\UtilitiesByMarc\inputBox wscript.popup_aaa.vbs e:\zmani\2018-12-14-13-14-18-0.7055475.txt 8 Report of wdPropertyTitle 0
URL: 

dtff

(end)

 

inputBox wscript.popup_aaa.vbs.rar

Link to post
Share on other sites

  • Root Admin

Hello @marceepoo

Let us get a full set of logs please so that we can see what's going on in more details.

Please run the Malwarebytes Support Tool and then attach the logs in your next reply:
NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  1. Download Malwarebytes Support Tool
  2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
  3. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  4. Place a checkmark next to Accept License Agreement and click Next
  5. You will be presented with a page stating, "Get Started!"
  6. Click the Advanced tab
     
     1944505166_Repairmenu_arrows.png.566f861
  7. Click the Gather Logs button
     
     Advanced_arrows.png.4bf56db369b0b175ee2b

  8. A progress bar will appear and the program will proceed with getting logs from your computer
     
     715586608_AdvancedGatherLogs_arrows.png.

  9. Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
     
     164871969_AdvancedGatherLogscompleted_ar

  10. Please attach the file in your next reply.

 

Thank you

Ron

 

Link to post
Share on other sites

  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.