Malwarebytes Anti-Exploit

Discussion in 'other anti-malware software' started by ZeroVulnLabs, Oct 15, 2013.

Page 2 of 164
  1. harshisthere

    harshisthere Registered Member

    Joined:
    Aug 8, 2011
    Posts:
    84
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Windows Defender.

    The following error occurred: Error code 0x80508023. The program could not find the malware and other potentially unwanted software on this computer.

    Category: Trojan

    Description: This program is dangerous and executes commands from an attacker.

    Recommended action: Remove this software immediately.

    Items:
    file:C:\Program Files\Malwarebytes Anti-Exploit\is-9GM3Q.tmp
     
    harshisthere, Oct 16, 2013
    #26
  2. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    That's an FP from Windows Defender. I'll contact MSFT to get this resolved. Thanks for reporting!

    EDIT: Question: did this happen during the installation of MBAE or when you executed mbae-test.exe and hit the "Exploit" button?
     
    ZeroVulnLabs, Oct 16, 2013
    #27
  3. harshisthere

    harshisthere Registered Member

    Joined:
    Aug 8, 2011
    Posts:
    84
    Re: Malwarebytes Anti-Exploit 0.09.4.1000


    It happened during installation.
     
    harshisthere, Oct 16, 2013
    #28
  4. hunkiller

    hunkiller Registered Member

    Joined:
    Apr 8, 2011
    Posts:
    4
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Similar alert here by MSE during installation.
     
    hunkiller, Oct 16, 2013
    #29
  5. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    @hunkiller and @harshisthere, Microsoft's FP reporting is a bit different from the rest of the industry as it relies heavily on real user feedback. Everyone who is having this problem (or even if you don't) please go to http://www.microsoft.com/security/portal/submission/submit.aspx and submit the file there. Make sure you choose the option "I believe this file should not be detected as malware".

    Thanks!
     
    ZeroVulnLabs, Oct 16, 2013
    #30
  6. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Avast has fixed the FP. This should not be detected anymore.
     
    ZeroVulnLabs, Oct 16, 2013
    #31
  7. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    hi
    i use SpyShelter Firewall now i installed Malwarebytes Anti-Exploit
    every time i launch Firefox get below error see attachment

    Image.png

    thanks
     
    Last edited: Oct 16, 2013
    co22, Oct 16, 2013
    #32
  8. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    ZeroVulnLabs, Oct 16, 2013
    #33
  9. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    Last edited: Oct 16, 2013
    co22, Oct 16, 2013
    #34
  10. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Thanks for that @co22.

    Does the problem persist if you disable or uninstall SpyShelter?
     
    ZeroVulnLabs, Oct 16, 2013
    #35
  11. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    No,i disabled now SpyShelter and start Anti-Exploit then start Firefox without error
     
    Last edited: Oct 16, 2013
    co22, Oct 16, 2013
    #36
  12. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    OK thanks for reporting. We will try to replicate internally and fix asap.

    EDIT: what's your OS and architecture?
     
    ZeroVulnLabs, Oct 16, 2013
    #37
  13. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    XP SP3 X86(32BIT)

    also how i can add custom software to the list of shields program in Malwarebytes Anti-Exploit?
    if it not possible can you add KMPlayer to default list?
     
    co22, Oct 16, 2013
    #38
  14. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    And version of SpyShelter?
     
    ZeroVulnLabs, Oct 16, 2013
    #39
  15. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    SpyShelter Firewall 2.6
     
    co22, Oct 16, 2013
    #40
  16. ky331

    ky331 Registered Member

    Joined:
    Jun 25, 2008
    Posts:
    158
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    My preliminary testing has been positive... no conflicts/crashes encountered. We'll see what happens over time.

    Just one minor issue: the mbae-default.log has no line-separators (CR/LF) between entries, so it's one long "jumble".
     
    ky331, Oct 16, 2013
    #41
  17. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Hmmm that's an old bug that seems to have re-surfaced. Thanks for reporting!!
     
    ZeroVulnLabs, Oct 16, 2013
    #42
  18. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    @hunkiller and @harshisthere, Microsoft confirmed to me they have fixed the FP and it will be deployed shortly in an update in the next few hours. Can anyone please re-install MBAE next to an updated MSE and/or Windows Defender and confirm?
     
    ZeroVulnLabs, Oct 16, 2013
    #43
  19. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,738
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    OK, thanks. Tests fine.
     
    J_L, Oct 16, 2013
    #44
  20. Blues7

    Blues7 Registered Member

    Joined:
    May 11, 2009
    Posts:
    870
    Location:
    2500'
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Tried it last night. Ran fine but apparently will not work with Firefox when it is supervised by Sandboxie on my XP Pro SP3 system.

    Worked fine with Firefox when run outside of Sandboxie.

    Uninstalled for now in hopes that a later version may resolve this issue (if possible).
     
    Blues7, Oct 17, 2013
    #45
  21. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    ZeroVulnLabs, Oct 19, 2013
    #46
  22. ky331

    ky331 Registered Member

    Joined:
    Jun 25, 2008
    Posts:
    158
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Checking your list of live issues/conflicts, I see no mention of EMET there. Was that an oversight? --- Or does it mean you've fixed the EMET-related problems? Is your EMET testing limited to only the latest version 4? Or are you also working with version 3.0 [which is still supported by Microsoft]?

    Just to let you know, I no longer use Lotus iNotes for an e-mail client. So if you were working on that problem just for me, it's okay to drop it. But if other users have complained, then it's worth pursuing.
     
    ky331, Oct 19, 2013
    #47
  23. Blues7

    Blues7 Registered Member

    Joined:
    May 11, 2009
    Posts:
    870
    Location:
    2500'
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    Will the issue with Sandboxie be addressed at some point or is it not feasible for the two apps to coexist?

    Thanks in advance.
     
    Blues7, Oct 19, 2013
    #48
  24. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    No problems with this release. Full compatibility with EMET 4.0 and CIS.

    One suggestion: the icon should show when protection is off.

    To my taste the blue icon from the previous version was better.
     
    Solarlynx, Oct 19, 2013
    #49
  25. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Re: Malwarebytes Anti-Exploit 0.09.4.1000

    We don't have any recorded problems with EMET. It was shortly in the list of known issues but we took it out as the report could not be verified nor replicated. So there seems to be absolutely no conflicts or issues running MBAE and EMET together as of now.

    They used to coexist with the previous version by adding some Sandboxie configuration offered by Dr_Larry_Pepper to allow MBAE's IPC channel through Sandboxie. But as of the latest version of Sandboxie that doesn't seem to work anymore. To be honest we haven't looked at the problem as our number 1 priority right now is getting MBAE to 1.0.
     
    ZeroVulnLabs, Oct 19, 2013
    #50
Page 2 of 164
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...