ExplotPayloadProcessBlock from cmd.exe

[cooliocatio]

export.txtmbst-grab-results.zip

Wasn't doing anything or hadn't recently installed anything but this popped up, was wondering if it was a false positive?

[cozz]

just got one as well.

[Porthos]

@cozz Please start your own topic.

[Maurice Naggar]

Hello @cooliocatio Your system has a installed applet 

PowerENGAGE 

It is some sort of printer related applet. It is not needed. Uninstall it and Restart your Windows system. Hopefully thereafter, the Explout alarm will be no more. My sense is that the printer-software-developers chose a ill-advised coding method, which triggers the alarm.

[cooliocatio]

1 hour ago, Maurice Naggar said:

Hello @cooliocatio Your system has a installed applet 

PowerENGAGE 

It is some sort of printer related applet. It is not needed. Uninstall it and Restart your Windows system. Hopefully thereafter, the Explout alarm will be no more. My sense is that the printer-software-developers chose a ill-advised coding method, which triggers the alarm.

Thanks for the feedback, for anyone viewing this, I'm using a Brother Printer

[Maurice Naggar]

Y.W. Let me know if you successfully Uninstalled the Brother PowerEngage.

[Arthi]

Hi,

Thank you to everyone who reported this issue and worked with us in providing logs, etc. We have now fixed this issue and it is going through internal testing. If everything goes well, we should be releasing the fix in the next 2 weeks or so. Please bear with us. Thank you.

Edited September 15, 2023 by Arthi

[Porthos]

The beta that was released today has the anti-exploit fix included.

You may get the beta by enabling BETA updates and checking for updates.

This is the version with the fix.