torrey Posted August 28, 2019 ID:1331675 Share Posted August 28, 2019 Monday evening we started receiving alerts of Anti-Exploit blocking VBScript.dll in Internet Explorer (?). It has escalated into the hundreds now. Is there an update that was pushed? It looks like the clients are running 1.13.2.98. It does not seem to affect functionality of any applications. Link to post Share on other sites More sharing options...
scoutt Posted August 28, 2019 ID:1331685 Share Posted August 28, 2019 we are getting them now too, since yesterday. We don't have any check boxes checked to block VB Scripting either, but still gets blocked. Link to post Share on other sites More sharing options...
Staff Rsullinger Posted August 28, 2019 Staff ID:1331686 Share Posted August 28, 2019 Welcome to the forums! Can you please collect these logs for us so we can look into the issue further: Thank you, Link to post Share on other sites More sharing options...
torrey Posted August 28, 2019 Author ID:1331694 Share Posted August 28, 2019 Malwarebytes Anti-Exploit.zip These are the Antiexploit files from one machine I have a lot more machines to choose from if you need them. I have no idea what triggers it since the users do not see alerts and are not reporting any issues. Link to post Share on other sites More sharing options...
Staff N33dful Posted August 29, 2019 Staff ID:1332014 Share Posted August 29, 2019 (edited) @torrey @scoutt, We've pushed out an update that should have resolved this issue, can you confirm whether or not your anti-exploit version has updated, and if you're still receiving the blocks? Edited August 29, 2019 by N33dful Link to post Share on other sites More sharing options...
torrey Posted August 30, 2019 Author ID:1332157 Share Posted August 30, 2019 It is much better today. We still have a few machines that are throwing alerts I have uploaded the files for two of them Malwarebytes Anti-Exploit_MachineA.zipMalwarebytes Anti-Exploit_MachineB.zip Link to post Share on other sites More sharing options...
torrey Posted September 3, 2019 Author ID:1332731 Share Posted September 3, 2019 We are back to being widely spammed again. Link to post Share on other sites More sharing options...
Staff N33dful Posted September 3, 2019 Staff ID:1332756 Share Posted September 3, 2019 Hi @torrey, Sorry to hear you're still having trouble, can you confirm what version of Anti-Exploit the machines producing the alerts are running? Link to post Share on other sites More sharing options...
torrey Posted September 3, 2019 Author ID:1332758 Share Posted September 3, 2019 1.13.2.98 from what I can see. The machine throwing the most alerts had disappeared from the console. It was there this morning but I cannot find it now - I have asked the local support tech to see if it could be rebooted. Link to post Share on other sites More sharing options...
torrey Posted September 5, 2019 Author ID:1333249 Share Posted September 5, 2019 @N33dful We are no longer receiving the alerts. Thanks for your help! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now