Jump to content

PC Pitstop Script being blocked


PCPitstop18

Recommended Posts

A customer has reported that the Exploit protection is blocking a script that PC Matic runs to launch scheduled scans on a computer. 

This will need to be allowed to run for our program to function correctly. 

-Log Details-
Protection Event Date: 12/18/18
Protection Event Time: 5:44 PM
Log File: 9aa35bbe-02ec-11e9-9bf7-6805ca00cff6.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.508
Update Package Version: 1.0.8379
License: Premium

-System Information-
OS: Windows 10 (Build 17134.471)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0

-Exploit Data-
Affected Application: Windows Script Host
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\Program Files (x86)\PCPitstop\PC Matic\cmd \c echo x86
URL:

Link to post
Share on other sites

Mine too:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/22/18
Protection Event Time: 11:37 PM
Log File: 1c468f92-063a-11e9-b7bb-20cf3023d06d.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.508
Update Package Version: 1.0.8449
License: Premium

-System Information-
OS: Windows 10 (Build 17763.195)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0

-Exploit Data-
Affected Application: Windows Script Host
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\Program Files (x86)\PCPitstop\PC Matic\cmd \c echo x86
URL: 

(end)

Link to post
Share on other sites

Thank you everyone for your interest and help.

I have eventually managed to list the entire PC Pitstop folder in the "Exclude a File or Folder" section of exclusions.  So far, I haven't seen an Exploit Blocked screen, so I might have solved the problem.

As an aside, it is time that Malwarebytes adopted a responsible attitude to AV competitors, and sorted out the problems they are introducing to anyone using them.  It is not really good enough, to have to exclude an entire folder in order for Malwarebytes to work properly.

 

Link to post
Share on other sites

  • Staff

Hi All,

We aplologize for the inconvenience caused. Let me try to clear up and answer all your questions.

Users have been reporting issues with Anti-Exploit in MB3 3.6.1 v1.0.508 blocking PC Pitstop. We analyzed it and
it was a false positive in our exploit protection module for which we have a fix in the standalone exploit protection tool.
  
Note: Exploit protection is a standalone tool by itself which we use to test out before we push the changes into the
exploit protection module in Malwarebytes.

Workaround: Please disable Exploit protection in Malwarebytes and instead install the below standalone tool. By doing so, you have the latest fix
to your issue and you are still protected against exploits with the standalone tool.

https://malwarebytes.box.com/s/3c0phipczdzijp9lfn1rjf7v31jlw1fz

If you keep getting notifications that real-time protection is turned off, please turn the below setting off to stop getting notified. You can find it in Settings menu->Applications Tab under Notifications.

 

Let me know if you have any questions.

image (3).png

Link to post
Share on other sites

  • 4 weeks later...
On ‎12‎/‎27‎/‎2018 at 10:55 AM, Arthi said:

Hi All,

We aplologize for the inconvenience caused. Let me try to clear up and answer all your questions.

Users have been reporting issues with Anti-Exploit in MB3 3.6.1 v1.0.508 blocking PC Pitstop. We analyzed it and
it was a false positive in our exploit protection module for which we have a fix in the standalone exploit protection tool.
  
Note: Exploit protection is a standalone tool by itself which we use to test out before we push the changes into the
exploit protection module in Malwarebytes.

Workaround: Please disable Exploit protection in Malwarebytes and instead install the below standalone tool. By doing so, you have the latest fix
to your issue and you are still protected against exploits with the standalone tool.

https://malwarebytes.box.com/s/3c0phipczdzijp9lfn1rjf7v31jlw1fz

If you keep getting notifications that real-time protection is turned off, please turn the below setting off to stop getting notified. You can find it in Settings menu->Applications Tab under Notifications.

 

Let me know if you have any questions.

image (3).png

 

Link to post
Share on other sites

It's about time Malwarebytes stops all the BS with competing AV Software, especially PC Pitstop. You did this before and now your doing it again. It is very aggravating. I'm considering not to renew Malwarebytes when my license is due.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 1/18/19
Protection Event Time: 11:44 AM
Log File: 16015abe-1b51-11e9-99aa-00bb6071a443.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.508
Update Package Version: 1.0.8858
License: Premium

-System Information-
OS: Windows 10 (Build 17134.523)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0

-Exploit Data-
Affected Application: Windows Script Host
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\Program Files (x86)\PCPitstop\PC Matic\cmd \c echo x86
URL: 

 

(end)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.