Share via

Code Injection from Outlook and Excel

Anonymous
2024-03-05T04:07:02+00:00

Hi All,

We have observed Outlook and Excel attempted code injection by calling the function "SetWindowsHookExW," resulting in blocks by Carbon Black endpoint protection.

We would like to understand if this behavior is expected and why these applications are attempting code injection.

Alerts:

  • Outlook: The application "c:\program files\microsoft office\root\office16\outlook.exe" attempted to inject code into the process "c:\program files\microsoft office\root\office16\outlook.exe" by calling the function "SetWindowsHookExW." The operation was blocked by Carbon Black.
  • Excel: The script "\desktop\file\B_list.xlsx" attempted to inject code into the process "c:\program files\microsoft office\root\office16\excel.exe" by calling the function "SetWindowsHookExW." The operation was blocked by Carbon Black.

Thank you.

*** Moved from Outlook / Windows / Classic Outlook for Windows / For home ***

Microsoft 365 and Office | Install, redeem, activate | Other | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-03-06T11:03:17+00:00

    Hello ReiM_7,

    Thank you for your reply.

    You are welcome. I'm glad I could help you with it.

    Regards,

    Michael Jr

    Microsoft Moderator

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-03-06T02:35:24+00:00

    Hi Michael Jr,

    Thank you for your reply, i have repost the question on Newest 'vba' Questions - Stack Overflow and Questions - Microsoft Q&A.

    Thank you.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-03-05T22:10:16+00:00

    Hello ReiM_7,

    Thank you for your reply.

    Based on your message, it sounds like you're experiencing issues with "SetWindowsHooExW" upon carefully checking that error it is related to VBA or visual basic application. For this question is already out of my specialty and this is more complex and requires assistance upfront. I suggest posting your case here on Newest 'vba' Questions - Stack Overflow and Questions - Microsoft Q&A. Our experts can help you with your concerns. The VBA and Q&A forums have a wealth of resources when it comes to VBA concerns.

    We will also leave the thread open for all volunteer moderators to join us and share their opinions/suggestions to help you address your concerns.

    I hope you find this information helpful.

    Regards,

    Michael Jr.

    Microsoft Moderator

    Was this answer helpful?

    0 comments