Exploit Office WMI Abuse Blocked

[xDanGRS]

I've just got this when trying to open a .docx file of mine to resume writing and malwarebytes's rtp gave me this. This has never happened before. I was able to open the file normally on my second attempt, with the only difference being that Word said it wasn't able to start normally the last time and asked if it should run in safe mode, to which i clicked no and it opened normally.

I ran a full system scan with MBAM and my AV and nothing was detected. My PC is overall fine. No crashes, slowdowns or anything negative.

Is this something i should be concerned about?

Exploit Blocked.txt

[Porthos]

It's probably due to the recent update that adds more protection for MS Office documents. Try removing the check for Exploit protection. Then see if opening, closing documents stops crashing and let us know.

Edited August 30, 2021 by Porthos

[AdvancedSetup]

Hello @xDanGRS

Please try the following and let us know if that corrects the issue or not.

Open up the Malwarebytes program and click on the cogwheel top right
Click on the "Security" tab
Scroll all the way to the bottom to the Exploit Protection settings and click the Advanced Settings button
Click the "Application Behaviour Protection" tab and scroll down to "Office WMI Abuse Prevention" and uncheck the box under "MS Office"
click "apply"

 

Thank you

 

[xDanGRS]

@Porthos @AdvancedSetup

Hello! The issue only happened once. I've opened over a dozen .docx files since the first occurrence and the issue haven't presented itself again. I only made a thread because i never came across something like this and wondered if i should be concerned or not.

I did disabled it in Application Behavior Protection regardless, however.

I am glad to know it's not anything serious. I appreciate the help!

[drnan]

That issue happened to me today, for the first time, and unlike xDanGRS, it kept repeating and I could not open any Docx files. I wanted AdvancedSetup (and everyone else) to know that his solution worked for me. Thanks.