Jump to content

How to Exclude Excel Addin Suddenly Showing as Exploit (No change in Addin)


Recommended Posts

I had an Excel Addin with No updates suddenly started showing as an exploit and blocked.  Details of exploit are:


-Log Details-
Protection Event Date: 9/16/21
Protection Event Time: 5:57 PM
Log File: 6ba9b2f6-1741-11ec-9bdc-00fffc453cb8.json

-Software Information-
Components Version: 1.0.1453
Update Package Version: 1.0.45000
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1237)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, C:\Program Files\Microsoft Office\root\Office16\WScript.Shell, Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Microsoft Office Excel
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office VBE7 object abuse blocked
File Name: C:\Program Files\Microsoft Office\root\Office16\WScript.Shell


WScript.Shell does not show in the directory: 

I have tried excluding Excel.exe, the directory: C:\Program Files\Microsoft Office\root\Office16\, and the program C:Windows\System\Wscript.exe but nothing works.

How do I fix this?


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.