Malwarebytes Anti-Exploit

Discussion in 'other anti-malware software' started by ZeroVulnLabs, Oct 15, 2013.

  1. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Last edited: Jun 15, 2014
  2. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,366
    Location:
    Italy
    It is generic advice.
    My incompatibility advice is specific to the ROP mitigations.
     
  3. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Hello Sampei Nihira,

    Thanks for the reply. I did not know that you were aware that MBAE was no longer going to support compatibility for EMET...
     
  4. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    Sorry...I can't see my issue on linked topics:
    "Known Issues"
    * nr 1-5 and 7-11 - I'm not using such apps or it's not about me
    * nr 6 - only one about Ff but I'm not using Roboform and It was happened on Vista
    "Incompatibilities & Conflicts"
    * I'm not using Avast, Sandboxie, GData, Panda, HMPA, EMET, Eclipse and Arduino
    * I'm using SpyShelter but on Vista (not XP how is mentioned) and all detected action for MBAE are allowed as you can see on screenshot
    140615094158_9.jpg
     
  5. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,366
    Location:
    Italy
    Hi Puff-m-d,
    I think you can install MBAE + EMET together.

    XP
    MBAE + EMET (Rop Mitigation SimExecFlow deselected)

    Windows 7 64 bit
    MBAE + EMET (All ROP Mitigations)

    ....................................................
     
  6. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Hello ichito,

    This is the conflict I was refering to in that post:
     
  7. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Hello Sampei Nihira,

    I was not trying to imply that you could not run the two together, I was only stating that since support for EMET compatibility has stopped, it would be reasonable to expect more issues and conflicts between the two. There is already a new experimental version of MBAE being tested that is introducing a new Layer0 "Security Enforcement" protection and new techniques for Layer1 protection which may or may not add even more conflicts or issues with EMET.
     
  8. vojta

    vojta Registered Member

    Joined:
    Feb 26, 2010
    Posts:
    830
    If it has Opera It can't be exactly 'default', don't you think?

    That's our problem here, I've been installing give-away-of-the-day's since General Motors was promoted to sergeant. My System32/Drivers folder is the size of the p0rn folder on a college student's laptop. Heck, I even use the App Verify trick to install programs that refuse to be installed on XP... and nothing, I don't have any of the problems that you have on you test installation. There must be something wrong with it, I simply don't buy that so many companies release programs, their flagship programs, that don't work right on a clean installation.
     
  9. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
  10. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    I don't think so...from my post #749
    "Vista 32-bit without HMPA"
    I uninstalled it earlier...but honestly - it's quite hard to remove/disable all known or possible apps/fatures in current system for only one reason - to be compatibile to MBAE. It's nice and useful tool but still too "raw"...I think.
     
  11. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Sorry, I misunderstood your post as meaning with HMPA no issues but with HMPA FF30 was crashing... I missed that you had uninstalled HMPA somehow... My misunderstanding, sorry about that :'( ...

    I think with all of the newer anti-exploit software out there, a lot of us have tried running 2 or more of them at the same time, whether it be EMET, HMPA, MBAE, or others. I must admit that I have had more than one anti-exploit software running at the same time, sometimes with issues and sometimes not. Some of these products are fairly new and in an almost constant beta cycle, which obviously can introduce even more conflict. I think maybe a good rule of thumb here is just like with real-time AV's and firewalls, it may be best to just choose the one that best suits your needs or test them all out one at a time until you do find one that fits your needs and stay with it. I have decided for myself to only run or test one anti-exploit at a time, the same way I only run one real-time AV and only one firewall. I think, in my case at least it will mean a more stable system and less cause for conflicts...
     
  12. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    You have the Experimental build and this is a known issue of that build. Please keep reports of that build exclusively in the Malwarebytes Experimental builds forum.
     
  13. The Seeker

    The Seeker Registered Member

    Joined:
    Oct 24, 2005
    Posts:
    1,339
    Location:
    Adelaide
    Installed the free version, can detect no slowdowns in Chrome. Very nice.
     
  14. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    Just ran the installer for latest experimental version, and it stays at v 1.0.3.1221. It was the correct setup installer.
     
  15. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Please keep feedback for the Experimental build in the Experimental forum.
     
  16. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    OK...but what about those people that don't want to sign up to the Malwarebytes forum?
     
  17. ZeroVulnLabs

    ZeroVulnLabs Developer (aka "pbust")

    Joined:
    Mar 5, 2012
    Posts:
    1,189
    Location:
    USA
    Use a throwaway email?
     
  18. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    I don't understand? You mean just make up an identity? Anyhow, I checked some of the files and they have been updated, but the main exe stays at 1.3.3.21.
     
  19. Nightwalker

    Nightwalker Registered Member

    Joined:
    Nov 7, 2008
    Posts:
    1,387
    I feel a irritant delay opening new tabs in Internet Explorer and Chrome when MBAE protection is active, IE is totally sluggish.
    The delay goes away if I disable MBAE ...


    Eset Antivirus 7 in Windows 8.1 x64
     
  20. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    Off topic posts removed. Report off topic posts.
     
  21. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,738
    Incompatible with both EMET and HMP.A? No thanks, these new Malwarebytes' releases have been nothing but trouble for me.
     
  22. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    Agree.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    MBAE working great for me. No slow down. I use Firefox, Slimboat, & Opera browsers (not all at the same time) & they all have plenty of zip while under MBAE's protection. I also use MBAE to protect ALL of my internet-facing apps such as email, FTP client, DNS benchmark, etc. I have noticed no slow-down whatsoever.

    Your mileage may vary.


    ~~~~~~~~~~~~~~~~
     
    Last edited: Jun 15, 2014
  23. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,093
    Location:
    Germany
    Trouble can result from using too many security applications parallel to each other as well. Especially when they are all trying to inject into and monitor the same processes, among other things.
     
  24. TomAZ

    TomAZ Registered Member

    Joined:
    Feb 27, 2010
    Posts:
    1,131
    Location:
    USA
    As I recall, you're an XP user, as am I. I'm currently just using the free version of MBAE with Firefox, but no problems at all here either. Seems like XP users have lucked out a bit with this one;).
     
  25. @Pedro
    Is the difference in startup delay a known issue?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.