Malwarebytes Anti-Exploit

Please PM me when the public beta for the new MBAM suite is here. I'll test it on my main Windows 10 home machine with File History and Macrium Reflect Home (after an additional offline backup of course).

 

Hello,

A new experimental version 1.09.1.1140 has been released. Information and download link available here: MBAE 1.09 preview.

 

Thank you.

 

Malwarebytes Anti-Exploit 1.9.1.1140

New Features:
• Hardened and more secure API hooking framework
• Added self protection mechanisms
• Added Layer3 techniques against Macro exploits
• Added Layer3 techniques against social engineering exploits
• Added Java advanced configuration options for companies

Fixes:
• Fixed conflict Symantec DLP
• Fixed conflict Chinese banking software
• Fixed conflict Office TabLoader

 

From 1.08.1.2563 to 1.09.1.1140 on Windows 10 Pro x64 (Version 1511, build 10586.494).
Browser: Edge and IE11 only.

With 1130 it was the Edge problems.

Now with 1140 it is the IE-11 problems (IE11 crashes 6 times).

Back to 1.08.1.2563.

 

Installed on W7PRO 64 - SP1 without problems, won't post unless problems discovered.
Don't use IE, just FF.

 

Well, at least they're not an LLC.



Thanks for the improvements! MBAE rocks.

 

hey guys I was just wondering I'm interested in install mbam anti-exploit on my laptop.

Will it in anyway slow down my browsing (firefox) with loading pages, or is this not something I have to worry about?

ty!

 

I haven't noticed any Firefox slow-down after running MBAE.

 

I got it on 3 machines here and no problems at all. Two laptops one hp the other a dell windows 7 64 bit ,the third is vista pc 32 bit. Runs smooth so far here.

 

I have been running MBAE with Firefox for over two years and can also confirm that it uses minimal resources. You will not notice any drag at all. MBAE has also been bug free for me with no issues whatsoever.

 

thanks for the replies!^ Installed MBAE and it's running fine, indeed no noticable slow-downs at all. Very pleased

 

they must have got the hooking problem solved. I had to go back to 1.08 a while ago. maybe I will give the new version a try now.

 

People think I am against HPMA and in favour of MBAE, which is nonsense, I am not using either. The stronghold of MBAE is that it has very few compatability issues compared to HMPA. Wilders is populated by Geeks, who like to solve problems, that is why they are so in love with HPMA. I install free version on PC's of people who are Security/PC noobs, It has never given any problems. The robust compatibility factor of MBAE is why I favour it over HPMA.

 

MBAE - all default settings (no skills to meddle with Advanced) - no issues on these simple systems, some tweaked a bit with Kees' (Windows_Security) suggestions:
- Windows XP-SP3 32 bit, Opera 12, current SeaMonkey with NoScript, MS Office 2003, Sunbelt firewall and SSM locked down, Java7 for local program only.
- Windows 7-SP1 64 bit, current SeaMonkey with NoScript, Kingsoft Office (all annoying KSO outbounds blocked by Outpost firewall), MSE.
- Windows 10 64 bit, current SeaMonkey with NoScript, infrequent use of Edge which I don't understand, MS Office 2007, Sphinx firewall, Windows Defender, OO Shutup, NVT ERP alert mode.

MBAE just watches the above important programs like a nice, friendly, quiet hawk.

Edit - oops-I initially wrote Windows XP-SP1, but it's SP3.

 

All these kudos for MBAE... Since, I have the new Surface Book, in which the only security I have on it for the moment is ZAM portable, perhaps MBAE should be the second security program to go on the laptop.

I am not going to load as many security programs, like I did when running my XP desktop. As many, that have seen from my previous posts here on Wilders' Security forums, I was a little over-the-top with the number of security programs running on my desktop.

 

Mmm, maybe just a little.

 

You, noticed!

 

That's also why I always liked MBAE, it almost never gives any issues. However, I did stop using it because I felt I needed to weaken the SBIE sandbox too much, in order to make MBAE work. I just wish that the developers could fix this. But I guess for non sandboxed apps I can still use it.

 

What exactly you mean by weaken? There's a template for MBAE to work within a sandbox.

 

Well, in a way you weaken the sandbox with the template, because it opens up process communication with apps running outside the sandbox. With HMPA you don't need to use a template, it just works out of the box.

 

Fine. But does it weaken SBIE too much, as you stated? From my pov is just a bit. Here we need an expert opinion, a dev opinion could be fine? Maybe Curt's opinion.

 

Perhaps you can ask about it in the SBIE thread or the SBIE forum. I'm guessing it's not an immediate threat. But I wonder how HMPA manages to work without having to "open things up".

 

ok installed new version and IE not opening seems to be fixed. guess the hooking issues is good to go.

thanks!!!!!!

 

Yes, the less communication to the "outside", the better.
AppGuard is one of the few programs that doesn't need a template.
But ERP,MBAE,etc. need a template so they can "detect" programs inside the sandbox