Mac Error "Bad Excess"...

Question

Hello,

i have a problem, if I run, word or excel I get an error (look at the end of this post).
All updates are installed, I removed word and excel from the computer and did a new install but nothing changed...

The error came from one day to the other, and the strange thing is on my MacBook (all updates are installed) it runs!

Can anyone help me?

System Information:
Apple M1 Max

Ventura 13.1

Error:

Microsoft Error Reporting log version: 2.0

Error Signature:

Exception: EXC_BAD_ACCESS

ExceptionEnumString: 1

Exception Code: KERN_INVALID_ADDRESS (0x0000000147800000)

Date/Time: 2023-01-14 17:56:00 +0000

Application Name: Microsoft Excel

Application Bundle ID: com.microsoft.Excel

Application Signature: XCEL

Application Bitness: x64

Application Version: 16.69.0.23010700

Crashed Module Name: libcorecrypto.dylib

Crashed Module Version: unknown version

Crashed Module Offset: 0x0000000000002c14

Blame Module Name: WinCrypto

Blame Module Version: 16.69.23010700

UnsymbolicatedChecksum: 08913C4E0140DEAF0341D732A2468322

Blame Module Offset: 0x00000000000040e0

StackHash: 3ed6bbddbeb418e6_1_0x0000000000002c14_bk_arm

Application LCID: 1031

Extra app info: Reg=en Loc=0x0407

Build Type: Release

Crashed thread Stack Pointer: 0x_000000016c368620

Crashed thread: 27

Answer 1

Hi

I don't have a really solid response because this is new. Here's what I found doing a web search: https://www.bing.com/search?ie=utf8&oe=utf8&q=wincrypto+mac

As you can see in the search results, wincrypto could be one of at least 3 different things:

• Software that floods your Mac with unwanted ads
• Software that takes over your Mac and locks it up hoping you'll be dumb enough to send the attackers your money and identity
• Legitimate encryption software

Your malware detector may not know about wincrypto yet, but you might want to ask them about it.

What puzzles me is why Excel is looking for wincrypto unless perhaps Microsoft is using the legitimate encryption app of wincrypto. But then, why the crash if it's legit?

Let's try to think this through.

Does the crash happen whenever you try to open Excel or when you try to open a specific workbook?

Do you have any Excel add-ins installed?

Do your security or encryption software use legit wincrypto?

Have you used Spotlight to search your Mac for any files having wincrypto in their names?

Ransomware attacks are particularly nasty. The attackers often spy on you before taking over your computer.

My worry is that we might solve the Excel crash but your Mac could still be vulnerable to attack.

Answer 2

There is nothing at my Mac like this, I use a cleaner wich doesn't find something and at spotlight search or finder search didn't find something like that.

Don't worries its a legal version, I tried it with the download from Apple Appstore and from the Office 365 site.

Answer 3

Hi

Please see this line in your crash log:

Blame Module Name: WinCrypto

WinCrypto is virus that attempts to get your money in a ransomware attack. https://howtofix.guide/wincrypto-virus/

I wasn't able to find a good description of how WinCrypto affects Mac users, nor did I find any mac malware software that claims it can remove WinCrypto.

If this were my Mac, I would immediately use Spotlight to find all files that mention WinCrypto and trash them. Then, restart the Mac and empty the trash.

Search with Spotlight on Mac - Apple Support

If this happens simply by opening Microsoft Excel, it appears that somehow Excel on your Mac may have been infected. I would do the following:

In the Applications folder, right-click on Microsoft Excel.app and choose Move to Trash from the menu

Restart your Mac

Empty the Mac OS Trash

Reinstall Excel using this installer: Install package

If the crash occurs only when you open a specific workbook, then the workbook is infected and should be trashed.