Exploit.PayloadProcessBlcok

[JoelS]

I am getting messages like the following. Nothing shows up in quarantine. Over a dozen messages occur within a couple of minutes. They have happened on most but not all days. A full scan shows nothing amiss. Suggestions?
 

Quote

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/15/23
Protection Event Time: 8:37 AM
Log File: 6c8cd432-53d5-11ee-89b6-18c04d03be8a.json

-Software Information-
Version: 4.6.1.280
Components Version: 1.0.2117
Update Package Version: 1.0.75315
License: Premium

-System Information-
OS: Windows 11 (Build 22621.2283)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property DeviceId, Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property DeviceId
URL:

 

(end)

 

 

[Porthos]

@JoelS

Please do the following so that we may take a closer look at your system.

Please restart the computer and do the following.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to the Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply
  
   

Thank you

[JoelS]

mbst-grab-results.zip

OK, here's the results. 

[Porthos]

The beta that was released today has the anti-exploit fix included.

You may get the beta by enabling BETA updates and checking for updates.

This is the version with the fix.

 

[JoelS]

Thanks, Porthos.