Malwarebytes Anti-Exploit

Seeing consistent start-up errors with 1175...

Code:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
  <EventID Qualifiers="49152">7022</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2016-09-07T13:14:39.679079800Z" />
  <EventRecordID>243259829</EventRecordID>
  <Correlation />
  <Execution ProcessID="464" ThreadID="508" />
  <Channel>System</Channel>
  <Computer>Taco</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="param1">Malwarebytes Anti-Exploit Service</Data>
  <Binary>4D006200610065005300760063000000</Binary>
  </EventData>
  </Event>

 

IE crashes all the time. can still not keep protection enabled in this version.

 

with build 1156 all protected apps crashed after i closed them, but build 1175 fixed it.
There are no crashes anymore. But to be sure i switched back to the stable version.

 

Hello,

A new experimental build, version 1.09.1.1180, has been released...
Announcement and download link: MBAE 1.09 preview

 

can we install this build over the old version?

 

Malwarebytes Anti-Exploit 1.9.1.1180 EXPERIMENTAL

New Features:
• Hardened and more secure API hooking framework
• Added self protection mechanisms
• Added sandbox technique for Silverlight
• Added Layer3 techniques against Macro exploits
• Added Layer3 techniques against social engineering exploits
• Added Java advanced configuration options for companies
• Added dynamic configuration feature to manage conflicts
• Added support for MS Play Ready
• Changed balloon notification to off by default
• Remove Run entry during uninstallation

Fixes:
• Fixed conflict with Symantec DLP
• Fixed conflict with Chinese banking software
• Fixed conflict with Office TabLoader
• Fixed conflict woth Kobil mIdentity software
• Fixed false positive with Adobe and .NET modules
• Fixed issue when adding invalid custom shield

 

I did. Required restart. Other than desktop icons loading slowly, everything went fine.

 

Were you prompted to restart?

My installs over .1175 on Win7x64 and non-AU Win10x64 did not.

 

BTW - I got around to noticing with .1175 I no longer see balloon notifications working on my non-AU Win10x64 and Win10-AUx64 systems. No fix in .1180 on the non-AU. (AU system will be updated later.)

Yes, they're enabled in Settings and notifications work OK for all other apps.

OK on two Win7x64 systems.

 

Thanks puff-m-d

From 1.08.1.2572 to 1.09.1.1180 on Windows 10 Pro x64 (Version 1607, build 14393.105).
Browser: Edge and IE11 only.

Let's see how it will goes the 1180, I don't want to face a repetition of 1140, 1156, 1175 bugs.......

Edit:
No problems so far.

 

Malwarebytes Anti-Exploit 1.9.1.1180 EXPERIMENTAL running fine on Avant browser

 

Yes. At the end of the install. I think I was using previous beta but I could be wrong (maybe it was latest stable).

 

I was using latest beta and never prompted for restart. In fact, since the last few stable and beta versions I've upgraded and never prompted for reboot the machine although I always restart it as thumb-rule. No biggie for me either way.

 

Installing 1.09.1.1180 over latest retail build on Windows 10 x64 1607, required a restart. Upon restart got a Windows message "Malwarebytes is taking too long to start. Please reboot." This happened twice. Had to do a clean install.

 

do you guys run the uninstall bat file also?

clean_mbae.bat https://forums.malwarebytes.org/topic/177164-how-to-remove-mbae-leftovers-after-uninstall/

one thing I found after running this bat file is your lic info is gone and will have to reenter it after you install the new version. so MAKE SURE you can find your lic info before using tis bat file.

 

One time i forgot to close a protected pdf-reader before i uninstalled it, so i was prompted for a restart.
In my case the deinstaller couldn't delete all files, because one of these files was "in use".
----------
I tried Build 1180 but Chrome crashed.
After analyzing the dump-file i see that mbae is the culprit. I switched back to the latest stable (again)
BUCKET_ID: APPLICATION_FAULT_STACK_OVERFLOW_DATA_mbae64+24599
ExceptionCode: c00000fd (Stack overflow)

 

Hey guys, just a heads-up we are still hunting down a few bugs with the new Dynamic Anti-HeapSpraying technique for IE. Also there's still some issues with the build server as the drivers are not Microsoft counter-signed in the experimental (1.09) version, so you might encounter some incompatible driver message from Win10 x64 AU.

We're getting very close to get this to the finish line. Thanks again for all the testing and keep it coming!

 

Any comments on this?

https://www.wilderssecurity.com/threads/malwarebytes-anti-ransomware-beta.383333/page-12#post-2617158

 

Rasheed187 this is Malwarebytes Anti-Exploit not Anti Ransomware thread, you have it all mixed up here.

 

re:1180
Event ID 7022: The Malwarebytes Anti-Exploit Service service hung on starting.

Code:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
  <EventID Qualifiers="49152">7022</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2016-09-17T15:59:22.271363800Z" />
  <EventRecordID>243262428</EventRecordID>
  <Correlation />
  <Execution ProcessID="460" ThreadID="504" />
  <Channel>System</Channel>
  <Computer>Badassa</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="param1">Malwarebytes Anti-Exploit Service</Data>
  <Binary>4D006200610065005300760063000000</Binary>
  </EventData>
  </Event>

 

Hello,

A new experimental build, version 1.09.1.1201, has been released...
Announcement and download link: MBAE 1.09 preview

 

Thanks, Kent.

 

Hello Thankful,

You are most welcome !

 

Thanks but this file has no digital signature.

 

Hello Mister X,

I sent a message to Ron over at Malwarebytes to see what is up with that....
I will post back when/if I find out anything.