tahlyn

same here. I downloaded Intel-Driver-and-Support-Assistant-Installer.exe from here: https://www.intel.com/content/www/us/en/support/detect.html did a scan with Malwarebytes 4.1.0.56, Update package version 1.0.25380, component package version 1.0.931, and Malwarebytes said it detected "Trojan.Clipper". I then went to VirusTotal and scanned the URL there and no viruses were detected from the URL.

I've already loaded Firefox in safe mode to disable all add-ons and I've also tried new profiles on both PCs, still gets blocked. I agree that I'm not using default settings in MB and it's only happening with the beta and nightly, but I'm concerned that the whatever is happening in beta/nightly will get pushed to stable and the blocking will start happening to the stable branch of Firefox, which will become a major issue. Better to catch it now than later. NOTE: some of the add-ons showing up in the scans have not been installed in my Firefox profile in awhile. I'm only using the current web extension add-ons that only work with Firefox 57 and later. I just tried to update to the latest database and it says I already have the latest version. Again, the blocking only happens if I check "RET ROP Gadget detection (64 bit)" for "Browsers" in advanced settings.

attached logs mb-check-results.zip FRST.txt Addition.txt

already have the latest version, but I did re-install and reboot, same result. Tried another Win10 PC. As soon as I upgraded Firefox to 58b4, it got blocked. The MB version on the other PC is 3.2.2.2029, which I believe is the previous version, so both the previous and latest versions of MB are blocking the latest beta version of Firefox at least on 2 of my win10 PCs. I've tried this with all add-ons disabled so I don't think it has anything to do with the add-ons. - just tried with a newly created profile in Firefox and MB still blocks that as well. - tried the latest Firefox Nightly build, and it's getting blocked (59.0a1 2017-11-17 64-bit). - created new Firefox profile and latest Firefox Nightly on separate PC with same result. If I downgrade back to stable v57 on either PC, it works fine.

After a few seconds of Firefox beta 58b4 opening, Malwarebytes closes and blocks with this message: protection against OS security bypass exploit ROP gadget attack blocked had to uncheck "RET ROP Gadget detection (64 bit)" for "Browsers" to keep this from happening. I always run Firefox beta and this just started after the upgrade to v58b4. This was not happening with any of the Firefox beta 57 builds. I've ran Firefox in safe mode with add-ons disabled with the same result. Also, this happened before and after the most recent upgrade to Malwarebytes. Malwarebytes 3.2.2.2029 - updated MB db as of 10:39am EST Windows 10 (Build 16299.64) Firefox beta 58b4 malwarebytes-report-17nov2017.txt MBAMSERVICE.LOG