What custom shields are you using with MBAE Premium

[MCFatTongue]

Hello all,

 

I've just downloaded the new MBAE Premium, so far all seems to be okay, I haven't tried custom shields yet myself.

 

The purpose of this thread is for users of the premium version to log the sucessfull custom shields they have implemented as a reference for other users.

 

Kind regards.

[pbust]

Moving to Questions subforum.

[puff_m_d]

Hello,

 

I have added my email client, my instant messenger, and Skype so far. All is working great!

[digmorcrusher]

PotPlayer and Nitro Reader.

[danburrito]

Thunderbird, Skype, WinRAR and PDF-XChange Viewer so far.

[John L. Galt]

I've just installed, so I'm going to keep an eye on this thread and see what else I can add when I get around to it.

[danburrito]

Also, Comodo Dragon and LibreOffice Writer.

[pbust]

Check the Known Issues for adding OpenOffice and LibreOffice. You only need to add soffice.bin, not every individual .exe.

[danburrito]

Thanks for the tip, Pedro, but I only use the writer of LibreOffice. Useful information for other users, though.

[puff_m_d]

Thanks Pedro   ...

[danburrito]

Are custom shields saved as a registry entry or a file? It would be tedious to add several custom shields, for example when reinstalling Windows/new computer, etc.

[danburrito]

Found it: applications.dat in C:\ProgramData\Malwarebytes Anti-Exploit

 

Possibly mbae-protector.xpe in the same directory as well?

[pbust]

Yes, applications.dat is the one.

 

So for example if you want to reset to default:

1- Stop MBAE service

2- Delete applications.dat

3- Start MBAE service

4- Run mbae.exe

[FleischmannTV]

Thanks for the tip, Pedro, but I only use the writer of LibreOffice. Useful information for other users, though.

 

You are not familiar with the process architecture of LibreOffice. All those programs actually run through soffice.bin.

[danburrito]

All those programs actually run through soffice.bin.

 

You are correct. When I posted the above, MBAE showed a shielded app when swriter.exe was opened. Guessing MBAE didn't change the counter fast enough when closing another shielded app prior to LO.

[puff_m_d]

Hello,

 

For those that may be interested if you are on Windows 8/8.1/8.1.1 and would like to try shielding your Metro apps, you can try the following: Since almost all Metro apps run via WWAHost.exe, add a custom shield for it. I have been doing this since the Premium version of MBAE was released and it is working well here on my system...

[Wojtek]

I have a problem with OpenOffice; I added it (i.e. soffice.bin) to the custom shields,

with 'choose a profile: office' option, but it crashed during opening (OA showed that

the process dwwin.exe was somehow involved), then I chose a profile: other,

and now sometimes it opens without any problem, and sometimes it crashes.

 

Other (cosmetic) bug: Logs in GUI show false info sometimes (e.g., 'Notepad is now protected.'

instead of 'Adobe Reader is now protected.'), but it's probably a known issue.

[John L. Galt]

Yeah, that goes right along with my post in the experimental thread where I had Firefox running but logs showed IE as being protected.

[Wojtek]

I have a problem with OpenOffice; I added it (i.e. soffice.bin) to the custom shields,

with 'choose a profile: office' option, but it crashed during opening (OA showed that

the process dwwin.exe was somehow involved), then I chose a profile: other,

and now sometimes it opens without any problem, and sometimes it crashes.

 

Unfortunately, trusting 'soffice.bin' in Online Armor seems to solve the problem

in most cases.  The option 'choose a profile: office' works well now.

 

Another small thing: the custom shields cannot be edited, and even viewed.

[MarkBevan]

MPC-HC, PotPlayer, Sumatra and Thunderbird here so far.  All working well (althought Sumatra required the 1.03.3.1225 Experimental version of MBAE).

 

Cheers

 

Mark

[Wilpower]

I think it would have been useful if users were posting the exact entries for these Custom Shields.

Curious to know what 'Profile' and 'File Path' folks are using for "Mozilla Thunderbird" on W8.1 64Bit?

[danburrito]

Curious to know what 'Profile' and 'File Path' folks are using for "Mozilla Thunderbird" on W8.1 64Bit?

 

Thunderbird/thunderbird.exe/other

[ky331]

Shielding OpenOffice, PaleMoon, PowerPoint Viewer, Trillian, Windows Live Mail, WordPad, and Works Spreadsheet.

 

(Since there's no view/edit feature, I can't easily check to see which profile I assigned to each...)

 

=================================

 

Question for Pedro:   You wrote that adding soffice.bin covers all of Open/Libre Office... that there is no "need" to shield the individual applications.   If one DOES add the individual apps (in addition to soffice.bin), can that be problematic? --- Or just that it does essentially nothing more that citing soffice.bin by itself??

[pbust]

Don't think there'll be any side effects, but it's un-necessary since MBAE will be injected already into the individual apps via soffice.bin.

[Wilpower]

Thanks Danburrito