Microsoft Word is shut down when I try to print. "Exploit blocked"

[stu444]

Malwarebytes shuts down Word when I try to print and gives me this message.   Please advise on how to fix this issue. 

Thank you!

 

[Porthos]

2 hours ago, stu444 said:

Please advise on how to fix this issue. 

Do you have the following setting enabled?

[stu444]

[Porthos]

Click this to see penetration testing.

Edited January 5, 2022 by Porthos

[stu444]

Block Penetration Testing Attacks is Turned off. 

[Porthos]

23 minutes ago, stu444 said:

Block Penetration Testing Attacks is Turned off. 

Have to look deeper.

To begin, Please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

 

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thanks

[stu444]

Attached. 

mbst-grab-results.zip

[Porthos]

2 hours ago, stu444 said:

Attached. 

Lets do the following first. If this does not correct the issue, there is another step.

Please do the following Uninstall and reinstall using the Malwarebytes Support Tool

Please close all browsers and programs before running the tool. Right click and quit MB from the system tray also.

Do not change any default settings after install. Please restart after install even if not prompted.

Once done it will attempt to reinstall both Malwarebytes and Privacy VPN.

Please say no and close the X button on the top right for Privacy.

[stu444]

Are you saying you want me to uninstall it and try to print?  This doesn't seem like a good idea since MB claims it is blocking malware when I try to print.   I've uninstalled, scanned and reinstalled.   The same thing happens.  Word closes when I hit CRTL P.

 

[Porthos]

1 hour ago, stu444 said:

Are you saying you want me to uninstall it and try to print? 

NO, The link is instructions to use the support tool do a clean uninstall and REINSTALL.

[stu444]

I'm getting the same error when I try to print from Word. 

[Porthos]

33 minutes ago, stu444 said:

I'm getting the same error when I try to print from Word. 

Well lets change one single setting in Malwarebytes exploit protection.

Uncheck only this box noted below.

[stu444]

Still not working. 

 

[Porthos]

2 minutes ago, stu444 said:

Still not working. 

 

Did you  hit apply after unchecking the setting?

 

Edited January 7, 2022 by Porthos

[stu444]

Yes.  I then restarted my computer.   It is still unchecked. 

 

[Porthos]

31 minutes ago, stu444 said:

Yes.  I then restarted my computer.   It is still unchecked. 

 

Get a new set of logs from the support tool AND the log showing the block instead of a screenshot.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

Thank you

[stu444]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 1/7/22
Protection Event Time: 3:25 PM
Log File: f4d5d866-6ff7-11ec-9fd9-708bcd4e1d0e.json

-Software Information-
Version: 4.5.0.152
Components Version: 1.0.1538
Update Package Version: 1.0.49536
License: Premium

-System Information-
OS: Windows 10 (Build 19042.1415)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, Explorer.EXE, Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Microsoft Office Word
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office WMI abuse blocked
File Name: Explorer.EXE
URL: 

(end)

[Porthos]

2 hours ago, Porthos said:

Get a new set of logs from the support tool

Do the above as well. I am going to loop the developer in as well.

@Arthi

[stu444]

mbst-grab-results.zipAttached is the updated file. 

[Porthos]

1 hour ago, stu444 said:

Attached is the updated file. 

The log does not show the use of the support tool to do the clean install. Did you just use the standard windows uninstall to do the reinstall I requested?

 

[stu444]

I did use the support tool to do the uninstall and reinstall.  I've again attached the zip file.   Perhaps I had uploaded the old one earlier?

mbst-grab-results.zip

[Porthos]

1 hour ago, stu444 said:

I did use the support tool to do the uninstall and reinstall. 

Just to be sure with a screenshot of the tool, this is what you did? Only asking as there is not a clean results text file in your logs.

[stu444]

I've posted two versions of the logs.  Please let me know if you need any other info.

 

Thank you for your help with this.   I'm hoping to be able to print from Word again soon!  

mbst-grab-results_NOT INSTALLED.zip mbst-grab-results_AFTER_REINSTALL.zip

[Porthos]

On 1/7/2022 at 3:20 PM, stu444 said:

File Name: Explorer.EXE

This is the confusing issue.

Where is the word document located on your computer that you are trying to print when this happens?

[stu444]

It doesn't matter where the doc is located.   It happens every time I try to print (clicking print from the menu or Ctrl P).  

I just experimented and found that this happens in all Microsoft office programs.   I've tried Excel and PowerPoint.   They function, I just can't print. 

If I try, the program abruptly closes and I get the Malwarebytes notification with the same Explorer.EXE location.