Jump to content

[SOLVED] False Positive on Technic Launcher

coconutnut

By coconutnut
in Anti-Exploit Beta

 Share

Recommended Posts

  • Staff
pbust

pbust

Posted
  • Staff
Posted

Can't seem to be able to replicate it without purchasing an account. Can you first try the following:

 

1- download and execute Process Monitor (procmon.exe) from MSFT SysInternals

2- replicate the issue

3- stop and save the procmon capture to your Desktop.

4- since the capture will be very big in size, use ZIP/RAR/7z to compress it. It will compress nicely.

5- post the capture back here for us to analyze.

 

Thanks!

Link to post
Share on other sites
  • Staff
pbust

pbust

Posted
  • Staff
Posted

We're working on it and hopefully the fix will make it in the next version 0.09.5. The fix is very similar to what we've been seeing in other incidents such as the one with Hitman.Pro where the information is not fully shown in the LOG tab nor do the exclusions work correctly under certain circumstances.

Link to post
Share on other sites
  • 4 weeks later...
WavingCookie

WavingCookie

Posted
Posted

Hello, MBAM Anti-Exploit told me that Technic Pack was using an exploit.

I always used it and I had no problem, and on my old PC, I had MBAM Anti-Exploit on it too, It didn't told me that.

My old PC was using Windows 8, this one I am on is using Windows 7 (both are 64bits)

The exploit message comes when the loading bar is finished.

Link to post
Share on other sites
Tiare

Tiare

Posted
Posted

Hello there community!

 

I just wanted to tell you all that MWAE blocks the Technic Launcher from starting up modpacks.

Possibly something to do about java, But i know for a fact that the application is harmless

It gets to the point where i launch a pack, But then it says it's blocked an exploit attempt 

 

 

So if there's any way that can be fixed on our end (Speaking for anti-exploit) i imagine we should, Unless it's something technic has to fix themselves.

 

-Tiare

 

 

Pictured: The Technic launcher, (Harmless) 

post-153596-0-37466700-1388527223_thumb.

Link to post
Share on other sites
Tiare

Tiare

Posted
Posted

Are you using the latest MBAE 0.09.5.0250?

 

If so do you see an entry in the MBAE GUI LOGS tab for this block event? If so you should be able to exclude it.

 

"Icon.PNG has been blocked, and Javaw.exe blocked from execution through java"

 

Either way, It's a false positive, But thanks

Link to post
Share on other sites
Tiare

Tiare

Posted
Posted

The picture didn't post correctly. Can you please post it again and verify if you can exclude it from the LOGS tab?

 

Also please attach or send me via PM your C:\Program Files\Malwarebytes Anti-Exploit\mbae-default.log.

 

thanks!

Sorry Here it is (Going to have to kill that link when you're done, Dropbox and all and it wont let me edit the post to upload it here), I excluded the "Icon.PNG" But the other one wasn't excludable (Although it started working when i whitelisted icon.png)

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.