FleischmannTV

I agree, but the initial posting of this topic is clearly derogatory and doesn't even allow for the possibility that something might have been wrong on the OPs end, without Surfright being at fault. He even goes so far as to accuse Surfright of criminal behavior, i.e. publishing a false product and scamming him.

Suffice to say that Build 187, which verifiably blocks this threat, is older than the sample (Build 187: released May 1st), hence Surfright couldn't have changed anything in order to improve the detection after the sample was released. I am quite confident that Alert has been fully able to mitigate this threat from the start and there either is something wrong with the OPs configuration or he is trying to pull our leg.

Surfright has responded, after I showed them this thread. http://www.wilderssecurity.com/threads/hitmanpro-alert-support-and-discussion-thread.324841/page-232#post-2490163

@Aura Any news? As a convinced HMP.Alert 3 user, I am following this topic with great interest.

Just tested 1.05. The performance improvement is huge and slowdowns are no longer noticable at all.

Greetings. I was wondering if MBAM scans the same program everytime it is executed on the same computer? For example, when browsing with Google Chrome, chrome.exe processes are closed and spawned all the time. Does MBAM real-time protection scan them everytime? Thank you

Premium should protect them, though you will have to add the shields manually. Free version doesn't shield exotic browsers and doesn't have the option to add custom shields. Hope this helps.

I think MBAE achieves the same goal as Sandboxie but it is much easier and comfortable to use. When it comes to protection they both are excellent choices.There is compatibility to consider as well. Office 365 is not compatible with Sandboxie (the Office version that runs through click-to-run). If all your programs are compatible with either Sandboxie or MBAE, it's a tough choice I think. Sandboxie may be a bit more robust but MBAE can stop attacks at an earlier stage whereas Sandboxie is more about containing them.

EMET and MBAE are incompatible as stated in the sticky : https://forums.malwarebytes.org/index.php?/topic/135127-known-issues-conflicts/

Yes, mbae64.dll is not injected into javaw.exe.

Hi there. I've been trying the 1007 and 1008 builds and it seems Java x64 is not shielded. I've double checked with process explorer to confirm that no dll is injected. Best regards logs.zip

Malwarebytes does not support AMTSO tests but that doesn't mean its protection isn't working. You can test its file system protection with the spycar test suite and the web protection with http://iptest.malwarebytes.org/ .

Pedro, I was wondering if this is an exploit which runs perfectly fine in a sandboxed environment because it doesn't require an infection of the system and hence sandboxing doesn't provide any protection against it?

You are not familiar with the process architecture of LibreOffice. All those programs actually run through soffice.bin.

pbust is referring to Malwarebytes Anti-Exploit BETA (MBAE). I suppose you are talking about Malwarebytes Anti-Malware (MBAM)? -http://www.malwarebytes.org/antiexploit/