Excel crashes when mwb removes wscript.shell

[jfjoyner3]

Excel add-in vendor says this is a false positive and has had problems with mwb before.  I requested and received a support ticket last week and submitted the files using the support tool but so far have not received even as much as an acknowledgement from mwb. Crappy support!!! Meanwhile, my only option is to turn off exploit module so I can run excel.

[Porthos]

7 hours ago, jfjoyner3 said:

I requested and received a support ticket last week and submitted the files using the support tool but so far have not received even as much as an acknowledgement from mwb

I assume you received the automated ticket number?

Be advised it can take 3-7 weekdays for a response after the automated reply with your ticket number.

7 hours ago, jfjoyner3 said:

Meanwhile, my only option is to turn off exploit module so I can run excel.

Until the issue is fixed that is one option.

Please post the log showing the detection so we can advise which of the exploit sections to disable to keep from turning it all off.

[jfjoyner3]

Alrready submitted the log … twice. Three to seven days sucks for technical support.

[Porthos]

32 minutes ago, jfjoyner3 said:

Alrready submitted the log … twice

Doing it more than once voids the first one and starts the time over.

Post the log here.

[jfjoyner3]

What do you mean it starts the time over? You mean the ticket issued to me loses it’s place in the que?

I’ve got a better idea. Screw you guys and your lousy tech support. I’ll use another program instead. This is my last purchase/renew from Malwarebytes. You guys suck.

[Arkadi]

I also have problems with macros causing MBAM to shut down excel, this is very frustrating.  I'm on version 4.4.6, log below

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/13/21
Protection Event Time: 7:52 AM
Log File: 1adfb380-1489-11ec-804d-6c4b90b2666b.json

-Software Information-
Version: 4.4.6.132
Components Version: 1.0.1453
Update Package Version: 1.0.44926
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1165)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, C:\Users\aromijn\Documents\WScript.Shell, Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Microsoft Office Excel
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office VBE7 object abuse blocked
File Name: C:\Users\aromijn\Documents\WScript.Shell
URL: 

(end)

[Arkadi]

It happens when we Create a Wscript.Shell object in VBA.