Share via


W10 1803 - Windows Defender blocking EXCEL

Question

Thursday, August 2, 2018 12:59 PM

Hello Everyone,

After upgrading to W10 1803 I've a strange behavoir with EXCEL and Windows Defender.
Every time I open the EXCEL Program, Windows Defender tell me that an Action was blocked.

Windows Defender Antivirus has blocked an operation that is not allowed by your IT Administrator.
* For more information please contact your IT administrator.
 ID: xxxxxx-xxxxxxx-xxxxxxx-xxxxx-xxxx
 Detection Time: 2018-08-02T12:13:15
 User: XXX\XXX
 Path: C:\Users\XXX\AppData\Local\Microsoft\Windows\InetCache\Content.MSO\xxxxx.tmp -> xl/vbaProject.bin
 Process Name: C:\Program Files\Microsoft Office\Office16\EXCEL.EXE
 Signature Version: 1.273.696.0
 Engine Version: 1.1.15100.1
 Product Version: 4.18.1807.18075

As far as I know, the sec dept. hasn't added any new policy for 1803 regarding windows defender.***

Has anyone a clue?
Thanks in advice.



All replies (5)

Wednesday, September 5, 2018 6:43 AM ✅Answered

Yes, I found the solution by myself.

Problem was related to a built-in Addin (developed by Microsoft but.....not signed.....).
Disabled the faulty addin (EURO CURRENCY TOOL) and now it's fixed.


Thursday, August 2, 2018 5:57 PM

Probably, Excel is using the file that includes a VBA script or something.

What happens if you delete contents of the folder "C:\Users\XXX\AppData\Local\Microsoft\Windows\InetCache\Content.MSO\

Verify that there is not important files before deleting.

You can also add an exclusion to Windows Defender.

It can be a file, folder, file type or process.

https://support.microsoft.com/en-us/help/4028485/windows-10-add-an-exclusion-to-windows-defender-antivirus


Friday, August 3, 2018 3:32 AM

Hi,

In addition, you can also refer to the following article and check if it can help you.

Windows Defender Antivirus in the Windows Defender Security Center app

/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus

Best Regards,

Tao

Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, August 3, 2018 6:20 AM

Hello,

I've checked inside the folder, it's empty - and when I start Excel creates some .tmp files.

Also the problem isn't related to a XLXS file, because I have this behavoir also If I only start EXCEL.


Wednesday, September 5, 2018 6:14 AM

We haven’t heard from you for a couple of days, have you solved the problem?  

Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].