locked
W10 1803 - Windows Defender blocking EXCEL RRS feed

  • Question

  • Hello Everyone,

    After upgrading to W10 1803 I've a strange behavoir with EXCEL and Windows Defender.
    Every time I open the EXCEL Program, Windows Defender tell me that an Action was blocked.

    Windows Defender Antivirus has blocked an operation that is not allowed by your IT Administrator.
     For more information please contact your IT administrator.
     ID: xxxxxx-xxxxxxx-xxxxxxx-xxxxx-xxxx
     Detection Time: 2018-08-02T12:13:15
     User: XXX\XXX
     Path: C:\Users\XXX\AppData\Local\Microsoft\Windows\InetCache\Content.MSO\xxxxx.tmp -> xl/vbaProject.bin
     Process Name: C:\Program Files\Microsoft Office\Office16\EXCEL.EXE
     Signature Version: 1.273.696.0
     Engine Version: 1.1.15100.1
     Product Version: 4.18.1807.18075

    As far as I know, the sec dept. hasn't added any new policy for 1803 regarding windows defender.

    Has anyone a clue?
    Thanks in advice.

    

    Thursday, August 2, 2018 12:59 PM

Answers

  • Yes, I found the solution by myself.

    Problem was related to a built-in Addin (developed by Microsoft but.....not signed.....).
    Disabled the faulty addin (EURO CURRENCY TOOL) and now it's fixed.

    • Marked as answer by TDA1990 Wednesday, September 5, 2018 6:43 AM
    Wednesday, September 5, 2018 6:43 AM

All replies

  • Probably, Excel is using the file that includes a VBA script or something.

    What happens if you delete contents of the folder "C:\Users\XXX\AppData\Local\Microsoft\Windows\InetCache\Content.MSO\"

    Verify that there is not important files before deleting.

    You can also add an exclusion to Windows Defender.

    It can be a file, folder, file type or process.

    https://support.microsoft.com/en-us/help/4028485/windows-10-add-an-exclusion-to-windows-defender-antivirus

    • Proposed as answer by Tony_Tao Wednesday, September 5, 2018 6:14 AM
    • Unproposed as answer by TDA1990 Wednesday, September 5, 2018 6:44 AM
    Thursday, August 2, 2018 5:57 PM
  • Hi,

    In addition, you can also refer to the following article and check if it can help you.

    Windows Defender Antivirus in the Windows Defender Security Center app

    https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus

    Best Regards,

    Tao


    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Tony_Tao Wednesday, September 5, 2018 6:14 AM
    • Unproposed as answer by TDA1990 Wednesday, September 5, 2018 6:44 AM
    Friday, August 3, 2018 3:32 AM
  • Hello,

    I've checked inside the folder, it's empty - and when I start Excel creates some .tmp files.

    Also the problem isn't related to a XLXS file, because I have this behavoir also If I only start EXCEL.


    • Edited by TDA1990 Friday, August 3, 2018 6:21 AM
    Friday, August 3, 2018 6:20 AM
  • We haven’t heard from you for a couple of days, have you solved the problem?  

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 5, 2018 6:14 AM
  • Yes, I found the solution by myself.

    Problem was related to a built-in Addin (developed by Microsoft but.....not signed.....).
    Disabled the faulty addin (EURO CURRENCY TOOL) and now it's fixed.

    • Marked as answer by TDA1990 Wednesday, September 5, 2018 6:43 AM
    Wednesday, September 5, 2018 6:43 AM