Jump to content

Microsoft Word unable to open


PeteAus89

Recommended Posts

I previously when opening Microsoft Word I received a message "Exploit blocked" I was provided the steps to fix the issue via this forum which fixed the problem.

Today I'm unable to open Microsoft Word at all is this a Malwarebytes issue or another issue?

Link to post
Share on other sites

@PeteAus89 I am seeing evidence of malware on your system from your log that you posted on the other topic.

Quote

_C:\Users\Owner\Downloads\This computer is BLOCKED(1).htm

I will move this to the Malware Removal section.

Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove pesky malware.

Please respond to all future instructions from your helper in a timely manner.

Please do the following so that we may take a closer look at your system for any possible infections.

Do these 2 steps FIRST so that files and folders are set to SHOW, plus also, Turn OFF Windows Fast Start.
Show-Hidden-Folders-Files-Extensions
https://forums.malwarebytes.com/topic/299345-show-hidden-folders-files-extensions/

Disable-Fast-Startup
https://forums.malwarebytes.com/topic/299350-disable-fast-startup/

Then please restart the computer and do the following.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • image.png.79d4442a821713608fa60808a98c2e69.png
  • image.png.98d86a6c3017d2bbba48877ea4f6ba45.png
  • A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply

    Then be patient for the next expert to take your case.

Thank you

 

Link to post
Share on other sites

2 hours ago, Porthos said:

Disable exploit protection temporarily and try again. Report back if that fixed Word or not.

image.png.30bd76d61d9a32015a712fdd82ae664e.png

 

2 hours ago, Porthos said:

Disable exploit protection temporarily and try again. Report back if that fixed Word or not.

image.png.30bd76d61d9a32015a712fdd82ae664e.png

No change with word after turning off Exploit Protection

Link to post
Share on other sites

4 minutes ago, PeteAus89 said:

I have never seen such a very large number of blocked IP pop ups being displayed by Malwarebytes even when I'm not browsing or the like. Is this normal?

Grab this log showing a few of the blocks. I will take a look in the morning its almost 5am here.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

image.png

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

image.png

 

If you click on the View option you should get something similar to the following with other options available.

 

image.png

 

 

 

Thank you

 

Edited by Porthos
Link to post
Share on other sites

5 hours ago, PeteAus89 said:

I have never seen such a very large number of blocked IP pop ups

I needed some of the logs from the IP blocks. screenshots do not have details.

Are they all coming from the following?

"websiteData": {
               "blockType": 2,
               "ip": "157.245.216.203",
               "isInbound": true,
               "netProtocol": "TCP",
               "port": 6888,
               "processPath": "C:\\Program Files (x86)\\Acronis\\Agent\\bin\\updater.exe",
               "url": ""

 

Edited by Porthos
Link to post
Share on other sites

22 minutes ago, PeteAus89 said:

This is what is displayed 

Looks like the Acronis updater is reaching out to bad IP addresses. I would get a list of every IP that is being blocked so we can have research check them for false positives.

Put them all in a text document and attach it and I will have it checked out.

Is Word working correctly with exploit protection on?

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.