I use internet security and I have set Hardened mode to aggresive. Today service pack 1 for Microsoft Office 2013 was relased so I clicked to install from windows update. Somewhere at the end of the update proccess (or when it finished) avast show a notidication saying that MSOHTMED.EXE (C:\Program Files (x86)\Microsoft Office\Office15\MSOHTMED.EXE) was blocked. Why this?
Is blocking of benign files that usual so that I should disable Hardened mode? It’s disapointing :-
I suppose it has to do with the fact that Hardened mode in aggresive mode, uses a whitelist of apps and this executable might be new and unrecognized, but it’s a verified microsoft exe and must be skipped from hardened mode. On the other hand I 've read that standard mode can cause more problems than aggressive.
Also, now after a while, I cannot see the exclusion I created for this executable in hardened mode exclusions. The space is blank!
UPDATE: after rebooting to complete the update, I could not even launch any office 2013 application as hardened mode blocks it! I relaunched them and now it’s ok. Was the time required for avast servers to update the whitelist responsible?
from log file:
25/2/2014 10:34:19 μμ Blocked: C:\Program Files (x86)\Microsoft Office\Office15\MSOHTMED.EXE
[Source: local://*C:\Windows\System32\msiexec.exe ]
[Opened by: C:\Windows\System32\msiexec.exe]
[Reason: 0x00020000]
25/2/2014 11:12:57 μμ Blocked: C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE
[Source: local://*C:\Windows\System32\msiexec.exe ]
[Opened by: C:\Windows\explorer.exe]
[Reason: 0x00020000]