locked
ASR Check Failed RRS feed

  • Question

  • I receive this EMET notification/log (pasted below) entry every time I visit my company's home page.  I'm assuming that EMET is blocking a vbscript from running but it also says "ASR check failed."  I'm not sure where to go from here?  I guess I'm trying to figure out how to interpret the logs.  Is there any way to allow the vbscript to run without disabling ASR for Internet Explorer?  Trusted sites list?

    Log Name:      Application

    Source:        EMET

    Date:          7/31/2015 10:28:23 AM

    Event ID:      1

    Task Category: None

    Level:         Warning

    Keywords:      Classic

    User:          N/A

    Computer:      [computername]

    Description:

    EMET detected ASR mitigation in IEXPLORE.EXE

     

    ASR check failed:

      Application        : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

      User Name        : [username]

      Session ID          : 1

      PID                      : 0x1EA8 (7848)

      TID                      : 0x1B7C (7036)

      Module              : VBScript.dll

     

      PID                      : 0x1EA8 (7848)

      TID                      : 0x1B7C (7036)

      Module              : VBScript.dll

     

    Details: EMET detected ASR mitigation in IEXPLORE.EXE ASR check failed: Application : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE User Name : [username] Session ID : 1 PID : 0x1EA8 (7848) TID : 0x1B7C (7036) Module : VBScript.dll

    Friday, July 31, 2015 4:07 PM

Answers

  • If you have the default settings for Internet Explorer, adding the site to the Trusted sites zone will bypass the ASR check.
    • Marked as answer by Farley637 Thursday, August 13, 2015 4:46 PM
    Saturday, August 1, 2015 12:36 AM