malwarebytes blocking windows 11 Start menu features.

[cybot]

malwarebytes just started blocking me from bringing up the device manager from the start menu (Win+X) Not sure why it suddenly started doing that. really dumb move! it doesn't seem to block the other MMC based options( disk management, event viewer, computer management) it only seems to have an issue with the Device Manager option. 

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 4/5/22
Protection Event Time: 2:12 PM
Log File: 081c1c74-b525-11ec-8f52-48a4726f9563.json

-Software Information-
Version: 4.5.7.186
Components Version: 1.0.1645
Update Package Version: 1.0.53297
License: Premium

-System Information-
OS: Windows 11 (Build 22000.593)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent - Exploit payload process blocked, C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\devmgmt.msc, Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Windows Control Panel
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\devmgmt.msc
URL: 

(end)

 

 

PLEASE FIX ASAP!!!

Edited April 5, 2022 by cybot

[cybot]

oddly enough opening devmgmt.msc  or device manager with the start search box does not trigger the erroneous block, only selecting the device manager from the Win+X menu will trigger the block.

Edited April 6, 2022 by cybot

[Porthos]

21 minutes ago, cybot said:

oddly enough opening devmgmt.msc  or device manager with the start search box does not trigger the erroneous block, only selecting the device manager from the Win+X menu will trigger the block.

Please open Malwarebytes and go to security and exploit settings and click advanced.

Click Restore defaults and then click apply. Chose Malwarebytes and restart the computer for good measure.

Then see if it fixes the issue.

[cybot]

ok, that seems to have fixed it. further testing, seems that the option to block penetration tests is what is triggering the false detection. not sure why this is so.

Edited April 7, 2022 by cybot

[Porthos]

13 minutes ago, cybot said:

ok, that seems to have fixed it. further testing, seems that the option to block penetration tests is what is triggering the false detection. not sure why this is so.

It is best to NOT enable any of the non default settings in Malwarebytes.

This includes this and the following two as well.