emet and java

Discussion in 'other anti-malware software' started by zakazak, Jun 23, 2011.

Thread Status:
Not open for further replies.
  1. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    523
    anyone knows how to configure EMET with java so it gives protection but won't crash the update process?

    thanks
     
  2. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,071
  3. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    523
    already did that. i added those files and removed DEP on them.. still doesnt work.

    @edit: okay it seems like smth else is causing the troubles.. i removed all java files from emet and still its not working :S

    "failed to download required installation files"
     
    Last edited: Jun 23, 2011
  4. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,071
    Then I don't what you can do, I use Secunia PSI to keep the important apps update.
     
  5. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    523
    thanks.. with secunia psi it works fine :)
     
  6. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    This has been my experience with Java and EMET.

    With DEP set to Always On, I always could update Java. But, be aware that there are two Java installers.

    There's an installer that's simply a patch, and contains no *.msi file. And, then there's the installer.

    The names are differentiated by an s. :rolleyes:

    Example name for the patch jre-6u26-windows-i586-s.exe
    Example name for the installer jre-6u26-windows-i586.exe

    The first one, you get from java.com and the second one from here -http://www.oracle.com/technetwork/java/javase/downloads/jre-6u26-download-400751.html

    I never had issues with the second one. Even recently I installed Java (the second link) in a relative's system with EMET and DEP set to Always on.


    -edit-

    For future reference, you could bookmark this URL -http://www.oracle.com/technetwork/java/javase/downloads/index.html (The one to download is JRE version.)
     
  7. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    By the way, even without EMET, the update process (Java's internal updater) never worked properly. It would never update. So, I manually update.
     
  8. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    I have them all forced with EMET. I just use Filehippo for updates.
     
  9. zakazak

    zakazak Registered Member

    Joined:
    Sep 20, 2010
    Posts:
    523
    and what kind of files did you add to emet (java) ?

    i have:

    java.exe (program files/java/jre6/bin)
    java.exe (syswow64)
    javaw.exe (program files/java/jre6/bin)
    javaw.exe (syswow64)
    javaws.exe (program files/java/jre6/bin)
    javaws.exe (syswow64)
    jp2launcher.exe (program files/java/jre6/bin)
    jqs.exe (program files/java/jre6/bin)
    jusched,exe (common files/java/java update/...)

    all checkboxes are checked.
     
  10. blasev

    blasev Registered Member

    Joined:
    Oct 25, 2010
    Posts:
    763
    I have the same experience. Can't install/update java through manual or automatic update.
    So to install/java java I turn off all emet protection (DEP SEHOP and ASLR)

    But I've read somewhere in this forum that you can also choose "opt in" for DEP and SEHOP , ASLR to work it out.

    @zakazak : my choice for java are copied from : -http://rationallyparanoid.com/articles/microsoft-emet-2.html

    Next time I won't be installing java to real machine so I don't have to set all this mess just to avoid being exploited :D
     
    Last edited: Jun 23, 2011
  11. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Easiest way (and far more secure than Opt In) is to make DEP Opt Out.

    @zakazak: More than enough, I didn't bother adding jusched.exe though (that's the update scheduler by the way).
     
    Last edited: Jun 23, 2011
  12. blasev

    blasev Registered Member

    Joined:
    Oct 25, 2010
    Posts:
    763
    Thx for the info
     
Loading...
Similar Threads
  1. emmjay
    Replies:
    5
    Views:
    763
  2. lodore
    Replies:
    3
    Views:
    652
Thread Status:
Not open for further replies.