MalwareBytes Blocks CloudPATIO due to Exploit payload

[DavidLamm]

Malware bytes falsely blocks our software called CloudPATIO at one of our customer's locations. They are Kirby Medical Center. This is used to display sleep study raw data.

Our software is invoked via the web browser. It launches a Batch script called run.bat which will retrieve a study file and pass it to another application called zzzPATViewer

agent version 1.2.0.1054

Windows 10 Enterprise

Version 22H2

OS Build 19045.3086

 

These are files that reported as being blocked. They have been added to exclusion list but still getting blocked.

CMD and batch scripts are not blocked by windows. The Run.bat can be executed manually.

 

Aaron Slabe is IT agent from Kirby Medical Center where this problem is occurring and can provide more details.

Edited July 13 by Arthi
Removed customer's personal info

[Arthi]

Hi DavidLamm,

Thanks for posting. Malwarebytes exploit protection module is blocking the action of a web browser running a batch script command as we consider this an insecure operation.

Workaround for this is to turn off exploit protection for the web browser being used to do this action.

Thanks.