Word office : Exploit payload file blocked

[Will02Fr]

Hello,

Yesterday, i downloaded a word file which office word refused to open and i keep have the notification of malwarebytes and i can't open Office word or any office product.

Just since yesterday.

what can i do please ?

You can find the FRST, addition and Adwlare files.

AdwCleaner[C00].txt Addition.txt FRST.txt

[Will02Fr]

Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'événement de protection: 23/09/2020
Heure de l'événement de protection: 14:51
Fichier journal: 71e5fb7c-fd9b-11ea-8db3-185e0f751d3a.json

-Informations du logiciel-
Version: 4.2.1.89
Version de composants: 1.0.1045
Version de pack de mise à jour: 1.0.30288
Licence: Premium

-Informations système-
Système d'exploitation: Windows 10 (Build 18362.1082)
Processeur: x64
Système de fichiers: NTFS
Utilisateur: System

-Détails de l'exploit-
Fichier: 0
(Aucun élément malveillant détecté)

Exploit: 1
Malware.Exploit.Agent.Generic, , Bloqué, 0, 392684, 0.0.0, ,

-Données de l'exploit-
Application concernée: Microsoft Office Word
Couche de protection: Protection Against OS Security Bypass
Technique de protection: Exploit ROP gadget attack blocked
Nom du fichier:
URL:

 

(end)

[Porthos]

6 hours ago, Will02Fr said:

Technique de protection: Exploit ROP gadget attack blocked

Can you please disable this setting marked in red. You should find it in Exploit Settings->Advanced settings.

This is not one of the recommended default settings that is turned ON. It can result in false detection's like in this case.

Thanks.

 

[AdvancedSetup]

Hello @Will02Fr

You can also click on "Restore Defaults" on the "Advanced Exploit Protection settings" dialog box.

• Click on the small gear icon on the top right of the main program
• Under Settings click on  the Security tab
• Scroll to the bottom and click on the Advanced settings button
• Click on Application behavior protection
• Click on the Restore Defaults button

 

Click on Show hidden contents to view screenshots
 

Spoiler