Malwarebytes Anti-Exploit 0.09.3.1000

Is blocking my Hitman Pro Alert updates, tried making an exclusion but it only shows the date, no file info so highly doubt this will work.

 

Have not noticed this on Win7 Ult 32 bits (yet), but for future changelog's I would appreciate some more specific info, e.g. which EMET mitigations are overlapping with MBAE

 

@ Zerovulnlabs

Have you tested the vulnerability of I.E. with MBAE ?

http://blogs.technet.com/b/srd/arch...-it-workaround-available.aspx?Redirected=true

EMET 4 blocks it.

 

With the next release of MBAE, version 0.09.4.XXXX coming out in a week or two you will be able to have a little more visibility.

Haven't tested it as I don't have the exploit itself. But I'll bet with whoever that MBAE stops it as well.

 

Thanks, I will disable those conflicting settings in EMET for these specific programs.

By the way, I really appreciate MBAE stopping executions invoked from injected dll's into browser (protected programs in general).

I have set DDL search mode to safe with group policy, may be an extra enhancement for MBAE to implement automatically?

 

Might not have to. From my (limited) tests they do not seem to conflict much. In some cases EMET pops first and in other cases MBAE pops first. Needs quite a bit more compatibility testing done.

Nice, thanks for noticing

Interesting, we'll take a closer look. Thanks!

 

i installed this whilst having malwarebytes pro installed and it turns off malewarebytes file system and website protection off. is this normal?

 

You mean MBAE turned off MBAM? No, that's not even possible. There must be something else happening on your PC.

 

I will uninstall the mbae and reinstall it an see what happens.

 

ok closed malewarebytes, after uninstalling mbae and reinstalled mbae. open malewarebytes and those two are dissabled. works every time. on win xp pro

 

"From my (limited) tests they [EMET+MBAE] do not seem to conflict much. In some cases EMET pops first and in other cases MBAE pops first. Needs quite a bit more compatibility testing done."

That would be an ideal situation, to be able to run both, side-by-side, without conflict

Since Microsoft is still supporting EMET 3 (as well as the newer EMET 4), are you testing/considering both? Or only the new/current version?

 

We will definitely need to take a closer look at this. Can you please send me a HJT, DDS or similar log showing system specs, installed software, etc.?

 

For now none, only informal testing. Once we finish adding all our stage 1 protections to the engine it will make sense doing more hard core compatibility testing with EMET.

 

Our new t-shirts
https://www.facebook.com/photo.php?...936639.1073741825.101480776638&type=1&theater

https://mobile.twitter.com/mkleczynski/media/grid?idx=1&tid=380770027772727296

 

Haha, very nice

 

Good looking T-shirts. Like it.

 

i get a popup when i try open a website through e-mail. "locate link browser.
to name and save file." then a blank page opens. If i have ie already open, it opens the page fine. also if i have ff set to default and not open, the page opens fine.


i have ff and ie with default set for ie. ie version = 8
outlook version = 2002

this works every time on my computer.

you want me to send hjt log as a pri message here?

 

What's the roadmap for MAE? When is 1.0 scheduled?

I find the GUI bugs annoying. I had VLC running with a long clip, and I paused and went away for 30 minutes. When I come back, MAE does not show VLC as shielded anymore. It's hard to tell if I'm actually still protected.

 

@controler, that sounds like an old bug. What version of MBAE are you running?

@shadek, what do you mean that MBAE is not showing VLC as protected after 30 minutes? The GUI doesn't show when protection "stops", only when it starts protecting a program.

 

running 0.09.3.1000 beta

 

Exit all your browser windows. Right-click on the MBAE traybar icon and choose Exit. Replicate the issue. Do you still get the prompt to "locate link browser" or whatever the message is?

 

do not get the message with your program not nactive.

the bug is still there

only ie and not sure if the version of office matters.

 

Is Malwarebytes Anti-Exploit in beta? Or is it a final release? I'd like to try it. Can it be used with WSA? Will they conflict?

 

Read their website

 

@Windows Security
I see. Well I'm kinda lazy.