Malware.Exploit.Agent.Generic

[cjonespui]

We are receiving a Malware.Exploit.Agent.Generic Blocked notification when opening an Excel Spreadsheet.

Location is ComSpec=c:\windows\system32\cmd.exe

Can you verify if this spreadsheet is infected?

What exactly is Malware.Exploit.Agent.Generic?

What is this notification telling us?

Thanks

 

EVA MOQ.zip

[Porthos]

4 hours ago, cjonespui said:

What exactly is Malware.Exploit.Agent.Generic?

We need the log showing the block.

[cjonespui]

What log are you looking for and how do I obtain it?

[AdvancedSetup]

In general this should work for most cases @cjonespui

 

 

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

 

[cjonespui]

Perhaps I am in the wrong form.  We are a corporate customer and are using Nebula.

Should I be reporting and uploading potential viruses to another location?

 

[AdvancedSetup]

No, this forum is fine. The majority of the forum is for Consumers but we do have forums for Business Products.

This is a function issue though and not really a false positive.

It is best that you open a support ticket for this and they can provide you with instruction on how to resolve this issue.

https://support.malwarebytes.com/hc/en-us/requests/new

Thank you @cjonespui and sorry for the confusion