Did you observe this problem anywhere?
As the .htaccess is almost the same when activating the module, I don't see where it can come from.
I tried to put these lines in the url blacklist but without any success :
/index.php?controller=attachment&id_attachment=*...