MalwareBytes Premium for Windows 4.4.6 Shutting Down Microsoft Outlook.

[JWBNYC]

For about the past week, MWB 4.4.6 has been occasionally shutting down Microsoft Outlook for Windows when emails come in. There is no pattern I can see as to what emails trigger this. They come from many places. The message is: 

Exploit Blocked

Real Time Protection

Affected Application:  Microsoft Outlook

Protection Layer: Application Behavior Protection

Protection Technique: Exploit Email client scripting abuse blocked

 

I filed for a support ticket four days ago but have heard nothing back.

Any suggestions on how to deal with this would be much appreciated.

Thanks.

 

[JWBNYC]

Would it solve the problem for me to uncheck "Email client scripting abuse prevention" under the Application behavior protection" tab in "Advanced Exploit Protection Settings"?

 

Or would this leave me unprotected?

 

Thanks

[AdvancedSetup]

Hello @JWBNYC

Yes, please uncheck that entry.

Open Malwarebytes, click the small gear on the top right and go to the b tab.
Scroll down to the bottom and click the Advanced Settings button
Click on the Application behavior protection tab
Scroll down to "Email client scripting abuse prevention" and uncheck it

 

 

Let us know if that corrects the issue for you

Thanks

 

[JWBNYC]

Thanks for the advice.

I am sorry to say that that did not solve the problem. (I checked "Apply" after unchecking "email client scripting abuse prevention").

It does solve the problem if I turn off "Exploit Protection" from "Real Time Protection" on the opening screen, but I am assuming that that defeats the purpose of using Malwarebytes at all.

What next?

Thanks.

Jed

[AdvancedSetup]

Okay, let's have you try the following then. Please click on the Restore Defaults.

Then go to the General tab and enable Event log data temporarily.

Then run the Outlook task again to trigger the detection again. Once the detection has been triggered again then get me a set of logs.

After you've gathered the logs you can turn off the Event log data

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thank you

 

[JWBNYC]

HI. The problem stopped for a day but just recurred.

Here is the zip file with the logs.

I appreciate your help.mbst-grab-results.zip

[AdvancedSetup]

Thank you for the logs. I will submit them for further review.

 

[AdvancedSetup]

Hello @JWBNYC

The logs indicate that you did not uncheck the item. Please do the following

 

Open Malwarebytes, click the small gear on the top right, and go to the Security tab.
Scroll down to the bottom and click the Advanced Settings button
Click on the Application behavior protection tab
Scroll down to "Email client scripting abuse prevention" and uncheck it and click Apply

Then restart the computer and let us know if that corrects the issue for you

 

 

 

 

Thanks

 

Edited September 17, 2021 by AdvancedSetup
updated information

[JWBNYC]

Hi-

That seems to have worked. (I had not understood that after unchecking the item I was supposed to re-start the computer. When I tried that before without restarting the problem persisted). The problem seems to be intermittent, however. So I am not confident that it will not recur.

 

Can you conform that I am safe with the item unchecked?

 

I am leaving the item unchecked. If the problem does recur I will create the logs and post them here.

Many thanks.

 

[AdvancedSetup]

We don't want you to remain with it unchecked. We are working on an updated fix to correct this. Hopefully that should be out within the next couple weeks.

Thank you

 

[JWBNYC]

So I take it that I should leave it unchecked for now and you will let me know when I can put the check back. Is that correct?

Many thanks.

[AdvancedSetup]

Yes, we will be posting once it has been released.

You can follow this topic

Cheers

 

[JWBNYC]

Hello. I updated to the new 4.4.0117 and teh problem is still recurring. What do I do now? Many thanks.

 

[AdvancedSetup]

This issue has not been addressed yet. Please continue to use the workaround

Thank you