emet and java

Discussion in 'other anti-malware software' started by zakazak, Jun 23, 2011.

Thread Status:
Not open for further replies.
  1. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    526
    anyone knows how to configure EMET with java so it gives protection but won't crash the update process?

    thanks
     
  2. guest

    guest Guest

  3. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    526
    already did that. i added those files and removed DEP on them.. still doesnt work.

    @edit: okay it seems like smth else is causing the troubles.. i removed all java files from emet and still its not working :S

    "failed to download required installation files"
     
    Last edited: Jun 23, 2011
  4. guest

    guest Guest

    Then I don't what you can do, I use Secunia PSI to keep the important apps update.
     
  5. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    526
    thanks.. with secunia psi it works fine :)
     
  6. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    This has been my experience with Java and EMET.

    With DEP set to Always On, I always could update Java. But, be aware that there are two Java installers.

    There's an installer that's simply a patch, and contains no *.msi file. And, then there's the installer.

    The names are differentiated by an s. :rolleyes:

    Example name for the patch jre-6u26-windows-i586-s.exe
    Example name for the installer jre-6u26-windows-i586.exe

    The first one, you get from java.com and the second one from here -http://www.oracle.com/technetwork/java/javase/downloads/jre-6u26-download-400751.html

    I never had issues with the second one. Even recently I installed Java (the second link) in a relative's system with EMET and DEP set to Always on.


    -edit-

    For future reference, you could bookmark this URL -http://www.oracle.com/technetwork/java/javase/downloads/index.html (The one to download is JRE version.)
     
  7. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    By the way, even without EMET, the update process (Java's internal updater) never worked properly. It would never update. So, I manually update.
     
  8. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    I have them all forced with EMET. I just use Filehippo for updates.
     
  9. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    526
    and what kind of files did you add to emet (java) ?

    i have:

    java.exe (program files/java/jre6/bin)
    java.exe (syswow64)
    javaw.exe (program files/java/jre6/bin)
    javaw.exe (syswow64)
    javaws.exe (program files/java/jre6/bin)
    javaws.exe (syswow64)
    jp2launcher.exe (program files/java/jre6/bin)
    jqs.exe (program files/java/jre6/bin)
    jusched,exe (common files/java/java update/...)

    all checkboxes are checked.
     
  10. blasev

    blasev Registered Member

    Joined:
    Oct 25, 2010
    Posts:
    763
    I have the same experience. Can't install/update java through manual or automatic update.
    So to install/java java I turn off all emet protection (DEP SEHOP and ASLR)

    But I've read somewhere in this forum that you can also choose "opt in" for DEP and SEHOP , ASLR to work it out.

    @zakazak : my choice for java are copied from : -http://rationallyparanoid.com/articles/microsoft-emet-2.html

    Next time I won't be installing java to real machine so I don't have to set all this mess just to avoid being exploited :D
     
    Last edited: Jun 23, 2011
  11. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,726
    Easiest way (and far more secure than Opt In) is to make DEP Opt Out.

    @zakazak: More than enough, I didn't bother adding jusched.exe though (that's the update scheduler by the way).
     
    Last edited: Jun 23, 2011
  12. blasev

    blasev Registered Member

    Joined:
    Oct 25, 2010
    Posts:
    763
    Thx for the info
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.