February 24, 201610 yr This is the original report:https://www.fireeye.com/blog/threat-research/2016/02/using_emet_to_disabl.htmleven those who have installed EMET 5.0 ...........As I have previously written better to change. Edited February 24, 201610 yr by Sampei.Nihira
September 1, 20179 yr Author I'm now getting error messages in my logs that four EMET PinRules expired on the September 1st. Anyone any idea how I can update them? I'm using EMET 4.1.
September 2, 20179 yr Unfortunately, there is no more recent EMET like version 5.52 and therefore no more recent newer PinRules. As announced by MS only for Windows 10 (Windows Defender Advanced Threat Protection), maybe the PinRules can be exported here?). Sorry that I can offer no better solutions.
September 2, 20179 yr Malwarebytes Anti-Exploit works on Windows XP: https://forums.malwarebytes.com/topic/205225-mbae-110-latest-standalone-beta/ I am using for a long time ago. It is very powerful and lightweight.
September 3, 20178 yr Author So is EMET effectively now completely obsolete? I downloaded the latest version (5.52) and the installer contains the same PinRules that just expired. If you have the latest version installed (not on XP obviously) does it update the PinRules automatically still to a later version? Edited September 3, 20178 yr by Dave-H Addition
September 4, 20178 yr Author OK, I've now just deleted the PinRules which had expired. I had to delete the websites that were using them (which was all of those listed) before EMET would let me do that. I did read somewhere that these "protected sites" (Yahoo, Twitter, Facebook etc.) are only actually protected by EMET when using Internet Explorer. Is that right? If that's the case there's no point in having them set up anyway, as I never use IE now for websites, only for Microsoft Update, as the sites don't usually work properly now in IE8 anyway! Edited September 4, 20178 yr by Dave-H Addition
October 16, 20178 yr https://forums.malwarebytes.com/topic/212278-something-amiss-with-anti-exploit-beta-110141/ Better to use MBAE beta ver.24.
October 16, 20178 yr 3 hours ago, Sampei.Nihira said: https://forums.malwarebytes.com/topic/212278-something-amiss-with-anti-exploit-beta-110141/ Better to use MBAE beta ver.24. Thank you for this information....Just yesterday I finally confirmed after hours and hours of going through the process of elimination, the problem. I have MBAE version 41 installed (following the automatic update) and just this week, firefox, IE8, slimjet and outlook express have all either failed to start or stopped after loading. I went back to previous images of my drive and still encountered the problem and was starting to think there may be a hardware issue that developed. Finally, upon disabling MBAE, everything settled down and started functioning properly. I now know to drop back to the previous version, which I have saved, until this issue is addressed by malwarebytes organization.
October 16, 20178 yr Same here; I tried this and I tried that, and finally figured out it was malwarebytes anti-exploit (after uninstalling it fixed my browser problems). Obviously a major botch on their part.
October 16, 20178 yr I wrote it in September: https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-146#post-2705310 Edited October 16, 20178 yr by Sampei.Nihira
October 21, 20178 yr FWIW, I was able to find MBAE v1.10.1.24 here: https://malwarebytes.box.com/s/xhbp0e8xyj4iom093gdtwyervxva0zxh I found the link and info here: https://malwaretips.com/threads/malwarebytes-anti-exploit-2017-update-thread.71901/#post-653879
October 21, 20178 yr Follow the instructions of the forum: After you do so: Double-Click on MBAE in your system tray to open it. Click on the SETTINGS tab. UNcheck the box to "Automatically upgrade to new versions". That stops the AUTOMATIC (i.e., without prompting you to confirm) updates. HOWEVER, you will now be presented with a "nag screen" prompting you to allow the update EACH TIME YOU REBOOT. You need to click CANCEL whenever you're presented with this confirmation dialogue if you want to keep the older version in use. This is what I added to the HOSTS file to avoid having MBAE auto-verison-update and nag me for updates: 127.0.0.1 data-cdn.mbamupdates.com
November 26, 20178 yr If anyone is interested, anti-exploit test with MBAE ver 24 in my XP: http://sendvid.com/iq904y0w
December 9, 20178 yr Hi all. Please read the links below: https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-147#post-2723309 https://forums.malwarebytes.com/topic/216367-mbae-111145-not-work-correctly-on-windows-xp/ Edited December 9, 20178 yr by Sampei.Nihira
Create an account or sign in to comment