MB Blocking Excel (again) against ROP Exploit

[atlong]

When launching excel, I'm getting an intercept popup from MB against the application.  See report/log below.  I have tried disabling Ransomware protection and have unchecked the MessageBox payload detection against MSOffice under security settings and made an exception to allow the MSOffice directory to launch files...all w/ no go.   If any other info or logs are need, please advise.  Thanks.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/10/20
Protection Event Time: 9:16 PM
Log File: 5a587d5a-f3cc-11ea-9a67-e03f497bafcf.json

-Software Information-
Version: 4.2.1.89
Components Version: 1.0.1045
Update Package Version: 1.0.29663
License: Premium

-System Information-
OS: Windows 10 (Build 19041.508)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Microsoft Office Excel
Protection Layer: Protection Against OS Security Bypass
Protection Technique: Exploit ROP gadget attack blocked
File Name: 
URL: 

(end)

[atlong]

It appears that the only workaround I can find is to disable Exploit Protection.   Thanks.

[Porthos]

1 hour ago, atlong said:

It appears that the only workaround I can find is to disable Exploit Protection.   Thanks.

For now try unchecking these.