Here you are: https://mega.nz/#!O0AXxbQY!VhJApWRdtNBvyI_2TVOD5YfqaB4UoJG3PTa66vVvUbU Edit: That is v5. Unfortunately, I do not have v4 in my archives.
I do not think that re-sharing software owned by a 3rd-party, but that is another point. May I ask why EMET 4.1 or 5.2 do not satisfy?
With v 4.,when I close any process that is protected by EMET, it's GUI closes but it continues to run in background using 100% of CPU until I Ikill it manually.
Hi, Thanks.Version 5 works perfectly on my XP machine. See the pic. Unfortunately seems that GesWall stops emet from protecting any geswalled browser or process, although emet.dll is still being injected according to process explorer.
Ok, I was able to fix it by adding a custom rule in geswall for each sandboxed application. Gave access to EMET service.
You have the trick POS READY 2009? If you do not have, SBIE is feeble as the Kernel not patched. MBAE ver 1.08 (beta) is the best choice compared to EMET 4.1U1 or EMET 5.0
EMET on XP has no SEHOP or ASLR protection. EMET's heapspray protection on WIN 7 is minimal at best. On XP, I would say it's non-existent. Actually, it is time you upgraded your OS.
EMET's heap spray protection only consists of pre-allocating certain regions of memory, however it is pretty useless as one can take any other address that is not pre-allocated.
I do have windows 7 n 10 as well. XP laptop is basically for testing stuff and I do still like XP as well. Plus ubuntu runs on it as my main OS. I like MBAE but unfortunately it doesn't work with my sandboxes. So EMET is the only option then. However will choose a sandbox over MBAE.
Have you tried the Sandboxie template to make MBAE work with Sandboxie? https://forums.malwarebytes.org/ind...frequently-asked-questions/page-2#entry911676
I am using latest beta of SBIE on windows 10 so not sure if it will work. On XP I use GesWall and actually I wanted to replace EMET with MBAE free on XP but MBAE doesn't work with GesWall. As Geswall is already a dead software, there is no way to configure it for MBAE, infact I tried and it doesn't have the needed option.