Dell XPS 8700, Win 10 Pro 64 bit version 1803, Avast Premier, MBAM Premium. Curious behavior: for the last several days, every time I used MS Word (part of MS Office 365) I got a notice from MBAM saying it had blocked an "exploit". This happened every time I closed MS Word, whether or not I had actually opened any Word file. It did NOT happen with other MS Office components (PowerPoint, Excel etc.). It happened only on closing MS Word, not during file operations within Word. Those all proceeded normally.
In preparation for this FRST run, I ran a complete image backup using Macrium Reflect 7. I first tried to use an external HDD that had fallen on the floor; some of the resulting errors show in the FRST scan log.
After running a successful Macrium image backup to another, undamaged external HDD, I can no longer reproduce the MBAM "exploit" message - I can open and close MS Word and nothing at all happens.
There have been no other symptoms than the MBAM notifications - the computer and all programs have run normally, except for the problems created by the damaged external HDD (disabled mouse, disabled keyboard, disabled APC PowerChute connection, and many error messages). Those problems ceased upon disconnecting the USB 3 cable between the damaged HDD and the computer.
Even 1/4 of FRST.txt was too long to post here. Nearly all of the entries are in the "Registry" section, in a list of Group Policy Restrictions.
I have attached FRST.txt and Addition.txt