sman

Hi @pbust, As my online usage is perdominantly trading oriented (pl. refer resolved Dietodin.exe issue), I keenly follow the forum on MBAE updates. Though I do not have any issues to state, MBAE services r running in Taskbar, UI in place in systray, dll injections present in Process explorer and test exploit check (Calculator app check) also promptly blocked/alerted by MBAE, my concern is in regard to the MBAE alerts/errors in WIn 10 - 1. IE11 download error, which is ack. by you but which I hv not come across, 2. Cmd.exe error which also is not a problem.. But, due to heightened security concerns, due to online trading, do I need to worry (absence of MBAE errors)?.. Tks..

Hi, I tried to check IE11 download of an excel file to c:\program files (x86)\malwarebytes anti exploit\ and it's fine with no issues. But as you say, that download error is reproducable when downloading to this folder, now am I protected? Tks..

1031 build was released immdtly after 1030, why don't u update to the latest build? ..

No issues here in WIn 10 (upgraded from win 8 and not felt need for clean install, so far).. CMD.exe works fine.. Keep RAM usage around 50-60%..

No issues here, with uploading/downloading of attachments in Gmail in IE11/Win10...

Malwarebytes must be investigating the problem.. Meanwhile, you could try this... 1. try running IE as administartor 2. try to do a clean boot - go to Taskmanager -> startup-> disable all startup items except AV & MBAE. - type 'msconfig' in search bar and run msconfig -> services-> hide microsoft services-> disable all-> check AV & MBAE services-> Apply -> RESTART 3. See whether error still persists? If this solves it, then you can check enabling one startup item at a time and re-booting and find the culprit? But if the error still persists, wait for Malwarebytes to get back.. After the tests, you can then enable all startup items, enable all services in msconfig and do a normal start.. Just my suggestion..

Yes IObit has a Antivirus module in their Ultimate pack and also a separate Malware Fighter tool. I used to use ASC but found instead of freeing me diskspace, it was doing the opposite and hv discontinued it's use. Rather I hv stopped using any of the system utilities, which could do more harm than good. Nowadays, all vendirs r moving to cloud based protection and I think Malwarebytes also shd shift to it. Moreover, no vendor can survive in anti-malware w/o it's own R&D as malwares keep evolving and need for protection to keep up with it. Just my view..

He is referring to IOBIT's Advanced System care ultimate (System cleaner/house keeping tool), and after MBAE install, he sees the privacy issues, security issues reported by the tool (ASCU) has dropped and in praise of MBAE for it.. Just a little bit excited, for nothing..

These r only my suggestions... - Do u have Norton's toolbar/extns for IE enabled? - Did u try with 'InPrivate' mode in IE? - Microsoft itself is moving away from IE and to Edge for parity with Chrome etc. So why don't u move to other browsers Chrome, FF, etc (preferably Chrome for its sandboxing, encryption/security features)..

Btw, I have set my Firewall to lock 'Hosts file' and do not use Hostsman.. Maybe this helps..

I don;t know what SWB is about, or abt SAS Pro (is it tool for Software as a Service but this would be SaaS).. Is your Win 10 up-to-date? there was a recent update for Flash for IE for WIn10, hv u updated it? As far as my system, I checked out whether Trendmicro Browserguard could be cause of any conflict of interest with MBAE and stopped TMBG in systray and also disabled it Toolbar add-ons in IE. No problem at all. whether TMBG is active or not.. So, it's 100% no issues with my system..

Strange indeed. I have absolutely no issues with IE 11 in my Win 10 system, whether it was in 1030 or 1031 build.

The problem was with Download Manager add-on in IE, disabling off it, solved all issues in IE. So, IE was fine in 1030 build. Since, there r no release notes to 1031, do not know, whether 1031 was due to siliconman01. Anyway, updated to 1031 and eveything is fine..

Hi, The problem seems to be with IE, not with MBAE, or other running apps. MBAE download link works fine in other browsers, but not so in IE. Also, to check out whether the problem occurs with any other download links, I tried to login to FB from IE and to my horror, it kept repeatedly going back to the FB login page.. Also, I tried with gmail, rediffmail and the result is same. One cannot login into FB, gmail, rediffmail in IE, a unique problem of sort., while there r no issues logging into these services from other browsers chrome etc. I checked it out , stopping out MBAE, turning off trendmicro browserguard, heimdal security, to no effect. Will have to check it out in other Win10 system, to see if it replicates. but feel will have to take it up with Microsoft support, only.. Hope this helps.. PS : Also noticed, that when in rediff, everytime get download request for some fb button of facebook.com, very weird indeed.

Hi, I checked on @siliconman01's on IE in Win 10 and no exploit was triggered in this case, but was unable to download the MBAE file with some garbage file name that it could not be downloaded by the download manager in IE 11.. I had installed Trendmicro's browserguard v3.0 which covers IE (running under compatible mode in Win10, as it is of Win7 or so compatability), but even disabling of this guard, had no effect and the result was the same. Hope this helps..

Hi, There is a giveaway for Heimdal security Pro at their website (6 months free) and I have installed it in my system and everything is fine.. No conflict with MBAE.. PS : though their site says of sys sonfig upto Win 8.1, it is working fine in Win 10.

Hi, Just a bit of paranoia that admin login would give privileges to an attacker to kill off MBAE and infect the system. Hope, it remains far fetched..

Hi, Tks for your reply.. I checked with Palemoon x64 (though I rarely use it), and do not find ;'plugin-container'' shield for it in Process explorer.. Is it normal? On the other aspect, I'm still not clear, if one were logged in as Admin, what happens? Hope this helps..

Hi, Updated to 1023 build and everything is fine.. Have a few general queries.. - Is 'plugin-container' protection only specific to FF, which is not the case with other browsers? - To uninstall some AV's one has to do it in Safe mode only, while in case of MBAE, from taskbar it can be killed off, so on this would it not be safer to be in line with AV's? Hope this helps...

Ok. I've gone back to the prev. build. Good Luck..

Hi, I fins that this book is a bible for IT people and find WEB SECURITY with link to the pdf.. I would hv posted the link but since, external links r seen as risks to forum, I hv stopped short of it.. As all online users can benefit from learning the security aspects of computing, hope to go thru' it some time.. Hope it helps..

Hi, it is the 'Other' profile. I have mentioned this earlier too.. With custom shields retaining on 1021 build install, FP popped up again with default settinsg and to offset it had to uncheck RET ROP settings for both 32 & 64 bit. Hope this helps..

Hi, The required logs... https://www.dropbox.com/s/cetvnb21su3aff5/Malwarebytes%20Anti-Exploit%281%29.7z?dl=0

Thanks for signing up for Cat facts! You now will receive fun daily facts about CATS! >o< What is this Cats use their tails for balance and have nearly 30 individual bones in them! <To cancel Daily Cat Facts, reply 'cancel'> Would you like to receive a Cat Fact every hour? <reply 'Tyxt33358dggyf' to cancel> Tyxt33358dggyf Cancel Command not recognized. You have a <year> subscription to Cat Facts and will receive fun <hourly> updates! In ancient Egypt killing a cat was a crime punishable by death. Thanks for choosing Cat Facts! Cancel Shut the hell up Commenad not recognized. Please let us know you are human to cancel by completing the following sentence: Your favourite animal is the (blank). Dog INCORRECT. Your favourite animal is the cat. You will continue to receive Cat facts every <hour>. Who is this Are you human? It would be: your favourite animal is a cat. Not the Welcome to Cat Facts! Did you know that the first cat show was held in 1871 at the Crystal Palace in London? Mee-wow! Shut up!!!!! I'm calling this number. If u don't stop Thanks for texting Cat Facts! Remember, every time you text you will receive an instant Cat Fact. To cancel, reply "chrykutfgh5764gvhtfvki gdrf678" Chrykutfgh5764gvhtfvkig drf678 <Command not recognized.> Did you know there are about 100 distinct breeds of domestic cat? Plenty of furry love! Stop Cats bury their feces to cover their trails from predators. <To cancel Cat Facts reply "dghdfjnhddhtd56666443 hgfdfdfuutregjbvcyu6546 8990" dghdfjnhddhtd56666443 hgfdfdfuutregjbvcyu6546 8990 You want to cancel? Please answer the following question to confirm you're human: Your favorite animal is the <blank>. cat INCORRECT. You said your favorite animal is the <dog>. You will continue to receive <hourly> cat facts.

Hi, Updated to build 1021 today.. Custom shields were automatically retained in install (don't know how @digmocrusher had problems?).. With default settings on install, when I tried to run Dietodin (my online trading software), false exploit alert popped up and had to uncheck 'RET ROP gadget detection' (for both 32 & 64 bit) to circumvent that.. Hope this helps...