Malwarebytes Anti-Exploit

OK I see, sounds cool to me.

Yes I understand this, but I didn't understand the post from ZeroVulnLabs, but he has just clarified this.

 

Well it didn't work that way for me, rest assured. I unchecked that box then clicked OK, and nothing happened. So about 2 days later I see the mbae service asking for internet access, obviously for an update, and grant it. Get that same popup again and this time I left the box checked, since last time not doing so resulted in no update. Then it updated... and also put the setting/check mark back beside the automatic updating setting.

That's how it worked for me. I'll just leave that box checked then uncheck the setting right after the update. Not that hard, but still, I can't imagine it being that hard to just create a legit manual updating option in the program either, like just about every other security app has. It may not be a big deal for some people but it's a pet peeve of mine to allow anything on my box to do anything "transparently", in the background. And even with this psuedo-manual updating option it's like a game of chance hoping I'm in front of my computer when I get the alert from Comodo that it's trying to connect out.

It's on my wish list, let's just leave it at that. Until/if it's remedied I'll just do as I said above.

 

But there's also a check box asking if you want to receive your updates automatically from now on, transparently in the background... or worded something like that... words I don't like at all when it comes to apps on my box. And if you uncheck it, even if you click OK afterward, it won't update... at least it won't on my box.

There's really nothing manual about that at all. First you wait for a popup that could come at any given time. Then your only way of receiving that update is to turn the automatic updating option on.

Especially for people like me who run a Custom Policy outbound firewall, it's not practical at all.

I don't want to make it sound like I'm ragging on your product, as I was one of the first people in here to praise it actually back when it was an obscure 1 man show... saying it would some day be the most promising 3'rd party software since Sandboxie. And still believing it. And am in no place to make demands either. But can only ask that you please give strong consideration to this.

 

Windows 10 Pro x64 & MBAE Premium 1.07.1.1015, no problems.

Since yesterday IE11 & LibreOffice can't started (error 0xc0000018 ) anymore.
In order to run IE11 or LibreOffice, I have to deactivate in MBAE the iexplore.exe & soffice.bin shields.
MBAE uninstalled / reinstalled, problem remains.
For testing purposes reinstalled the previous version (1.07.1.1011), problem remains.

In IE11 noticed the following:
MBAE iexplore.exe shield deactivated.
Start & run IE11.
With IE11 on, MBAE iexplore.exe shield re activated
IE continues to run without problem
Close IE11
Try to start IE11 once again (with MBAE iexplorer.exe shield activated)
IE11 error
-------
PDF files (Acrobat Reader) tested, no problems.

 

@luciddream, yes we'll consider this.

@anon, please follow these steps.

 

Already done (twice)....

=
1- Close all running programs
2- Uninstall MBAE from Control Panel
Run CCleaner
3- Reboot
4- Delete C:\ProgramData\Malwarebytes Anti-Exploit
Reboot
5- Install the latest version of MBAE.

 

Can you PM me a fresh set of FRST logs?

 

No, I'm not using the Farbar Recovery Scan Tool.

 

Any other tool of your choice that outputs a similar log will do.

 

I can assure you that my PC is clean.

Avira Pro realtime, on demand: MBAM Premium, HitmanPro free, Zemana Anti-Malware portable lifetime, RogueKiller free.

 

I'm not so much worried about infection as I am about conflict with some other software. That's why I need to see what else is installed on the machine.

 

Any other tool as? Can you name few?
----

Nothing changed the last days.
And if nothing changed, how the conflict started since yesterday?

Edit:
Third attempt, few minutes ago.

Seems the problem solved.... for the moment.
I'll post back for changes, if any.
Thanks for your assistance.

 

@ luciddream,
See the screenshot (the auto upgrade is off, the service "mbae-svc.exe" runs continuously) and read the following
=

 

See the attached screenshot......

 

MBAE still causes Firefox to be unable to open due to "Error : Couldn't load XPCOM". My current system is

Windows 7 Ultimate 64 Bit + Kaspersky Internet Securiry 2016

Then I had to remove MBAE since Firefox is my main browser for my jobs.

 

We've added a fix for this in the upcoming MBAE 1.08 beta.

 

Good to know. Thank you for your update.

 

Should Kingsoft office files be classified as office or other?

Kingsoft is notorious for scheduling updates behind my back, and it wants to connect every time I run one of the office apps. So the only way to kill all its internet trips is via 5 blocks in the firewall which works fine.

These are the files running every hour by task manager: wpsnotify, wpsupdate.
And these are the main office files: et, wpp, wps. They even want me to send what I work on to facebook when I exit
Do I put all 5 files into MBAE or just the 3 office files?

 

Hi, I've just installed MBAE, and tried run the test program, but I keep on getting this error message...
It's always the same, no matter how many times I download and run it... any ideas?

 

@act8192, you should add Kingsoft as Office profile. As for the Kingsoft updaters, you can add those as "Other".

@porkpiehat, are you downloading the latest version from here?

 

Hello,

Just posted:
MBAE 1.08 Beta Preview

Changelog:

 

@ puff-m-d,
Thanks for the heads up!
Installed, no problems so far.

ZeroVulnLabs,
The shielded applications counter is gone for ever?

https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-93#post-2508532
https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-94#post-2508533
https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-94#post-2508537

Yes, I know=
https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-94#post-2508538
but still you can fix it?
Or remove it in chrome and leave it for the rest browsers.

 

Hello anon,

You are most welcome !

 

What programs can you add to MBAE? Should I add media player classic?

 

Yes. You can add MPC-HC as I did.