There were hints how to mitigate the attack vector. In mid-March 2023, I had pointed this out in the post Improved Office macro security leads to new attack methods via OneNote and other filetypes and linked to the post How to prevent Microsoft OneNote files from infecting Windows with malware by Bleeping Computer. Specifically, the Emotet Trojan is increasingly being spread via this vector (see my German blog post Emotet ist im März 2023 zurück, Verbreitung der Malware über OneNote-Anhänge). This is then capable of causing further mischief.

If the user clicks away a warning that a file is being opened from OneNote, a Windows Script file script embedded in the. If the user opens this attachment, it opens in OneNote. The basis for this warning is a blog post by SpiderLabs, which in December 2022 had come across Trojans that were included in OneNote files with the. Bleeping Computer colleagues had already pointed out in January 2023 that hackers are making use of Microsoft OneNote attachments to spread malware (see Hackers now use Microsoft OneNote attachments to spread malware). Meanwhile, cybercriminals are using OneNote as a gateway to launch attacks or spread malware. I wasn't aware that I had removed the driver.Since Microsoft and administrators of Windows systems have been investing more in macro security, attacks via this vector have become more difficult.

Contact the administrator to install the driver before you log in again.' 'Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. I'm getting error ID 1111 (TerminalServices-Printers ) in the system event log in a SBS 2008 server.

Onenote for windows 10 printer