Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Karlis_Erglis
Contributor

Anti-Malware False Positive to Office vba

We came across following problem with Office vba.

Some of our vba macros for out analytics contains CommandBarControl object. 

Theses files been classified by CP as infected with malware - HEUR:Trojan-Downloader.Script.Generic.

cp_xls_trojan.PNG

 

 

Is there some workaround? Have any one encountered such problem?

2 Replies
Daniel_Taney
Advisor

Exceptions can be created in the Forensics Quarantine policy using the SHA-1 or MD5 hash of the file. If it is just a standard set of VBA scripts, you could try exempting them that way.

It could also be done based on filename or path if their location would be common across all machines.

R80 CCSA / CCSE
PhoneBoy
Admin
Admin

Hi, have you opened a TAC case on this?
While exceptions can be configured, this sounds like a potential false positive issue we need to investigate most closely.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events