Jump to content

Exploit Office WMI abuse blocked


fred3
 Share

Recommended Posts

We are getting alerts when some Microsoft Excel files are opened.  We understand there's a setting in Malwarebytes that will stop the alerts from happening.  However, we don't want to turn off intended protections until we can have confidence that the alerts we receive are false positives.  Otherwise, we'd be disabling an important protection.

What causes these alerts to appear really?

 

Link to post
Share on other sites

16 minutes ago, fred3 said:

What causes these alerts to appear really?

Malwarebytes hardened the exploit protection in the latest version, It is causing FP's with Office programs.

18 minutes ago, fred3 said:

We are getting alerts when some Microsoft Excel files are opened. 

We need a log showing the block please.

Link to post
Share on other sites

  • Root Admin

Hello @fred3

Can you please post back the log showing the block. Then open Malwarebytes, go to Settings, and enable Enhanced logging.

Then attempt to run Excel again and once you're able to duplicate the block again then gather the following logs for us.

 

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thank you

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.