Malwarebytes 4.4.6 crashing Word 2016 when it runs 'Office Tab'

[atitlan]

Re: Malwarebytes 4.4.6 • Windows 10 Pro 21H1 Build 19043.1165 • mb-support-1.8.7.918 • Office Tab 13.10

Malwarebytes 4.4.6 has started crashing Word 2016 when it runs the 'Office Tab' Add-in from Extend Office. This happens on all three of my Windows 10 PCs (2x Desktops + Laptop, all Pro and same Windows version / build).

For at least four years all previous versions of Malwarebytes Premium have allowed this Add-in to run. Incompatibility has begun with 4.4.6

To facilitate troubleshooting, Log Files produced within this hour are attached.

Grateful for help.

mbst-grab-results.zip

[Porthos]

Please post just the log showing the detection so we can advise which of the exploit sections to disable to keep from turning it all off.

[atitlan]

@Porthos — Thank you.

If the attached log is not the intended one, please indicate the path and I will fetch it.

MBAMSERVICE.LOG

[Porthos]

20 minutes ago, atitlan said:

please indicate the path and I will fetch it.

You should find it in the following location.

Please double-click on one of the block entries shown in the image to view the report, then click the Export link on the bottom left of the report and select Copy to clipboard, then paste the contents here in your next reply so that we may take a look and advise you based on what it shows.

Thanks

Edited September 13, 2021 by Porthos

[atitlan]

@Porthos — appreciate your patience.

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/11/21
Protection Event Time: 3:08 PM
Log File: ae906ae0-1333-11ec-91fe-000000000000.json

-Software Information-
Version: 4.4.6.132
Components Version: 1.0.1453
Update Package Version: 1.0.44856
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1165)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, ComSpec=C:\WINDOWS\system32\cmd.exe, Blocked, 0, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: Microsoft Office Word
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office WMI abuse blocked
File Name: ComSpec=C:\WINDOWS\system32\cmd.exe
URL:

 

(end)

Thank you!

[Porthos]

1 hour ago, atitlan said:

Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office WMI abuse blocked

Try unchecking the following in the advanced settings of exploit protection.

[atitlan]

Crash(es) continue —

 

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/13/21
Protection Event Time: 6:57 AM
Log File: 5f804d90-1481-11ec-ab6b-000000000000.json

-Software Information-
Version: 4.4.6.132
Components Version: 1.0.1453
Update Package Version: 1.0.44926
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1165)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, 0, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: Microsoft Office Word
Protection Layer: Malicious Memory Protection
Protection Technique: Exploit code executing from Heap memory blocked
File Name:
URL:

 

(end)