False Positive for LibreOffice_7.5.3_Win_x86-64.msi ?

[Bernouille]

Hi,

Same trouble, trying to use Druide Antidote (a grammer checker) and got this :

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 31/05/2023
Protection Event Time: 02:33
Log File: ca92213e-ff4a-11ed-a27b-0023aee76e30.json

-Software Information-
Version: 4.5.29.268
Components Version: 1.0.2022
Update Package Version: 1.0.70219
License: Premium

-System Information-
OS: Windows 10 (Build 19045.2965)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.OfficeSpawningBatchCommands, C:\WINDOWS\system32\cmd.exe \c ver, Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: LibreOffice
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office spawning batch command blocked
File Name: C:\WINDOWS\system32\cmd.exe \c ver
URL: 

(end)

[Porthos]

5 minutes ago, Bernouille said:

Same trouble

Yours is a different issue. Yours can be fixed by unchecking the following setting.

[Bernouille]

It still happens. I dont use MS Office but LibreOffice.

[Porthos]

 

3 minutes ago, Bernouille said:

I dont use MS Office but LibreOffice.

No difference in exploit protection, Uncheck the item I listed. Office is office libre or MS

[Bernouille]

Oh, my mistake! "Unchecking" fixed it.

Thanks and sorry for the bothering.

[Porthos]

8 minutes ago, Bernouille said:

Thanks and sorry for the bothering.

No bother, I basically live here anyway. There is always "for the most part" a browser tab open to the forum.

[AdvancedSetup]

7 minutes ago, Porthos said:

No bother, I basically live here anyway.

 

ROFL 😁