Jump to content

[SOLVED] MBAE blocks connection from Java Apps

David_B

By David_B
in Anti-Exploit Beta

 Share

Recommended Posts

David_B

David_B

Posted
Posted

Just thought I'd let the folks at Malwarebytes know that the first two times I tried to start my Minecraft server after installing MBAE, MBAE blocked the server's attempt and binding to port 25565 as an exploit attempt. On my third try without making changes, I was able to launch the server. Every following time since then, I have been able to start the server with no problem whatsoever, but I thought I should let you guys know of this.

 

My Minecraft server is not a vanilla server, and uses Spigot (Bukkit derivative) with several plugins.

Link to post
Share on other sites
SuperbMoth316

SuperbMoth316

Posted
Posted

I try to play minecraft using Java of course, but when I try to load my world MBAE closes it and says it blocked an exploit attempt.  Please tell me if this is just a bug or if someone is trying to exploit me.

 

I looked at the logs in MBAE and it says: An exploit code has been blocked in Java.

 

I cannot seem to attach a log in any way.   :(

 

 

 

Thanks for any help.

Link to post
Share on other sites
SuperbMoth316

SuperbMoth316

Posted
Posted

I have found the logs location and I have the info posted:

 

 

 

"2014-09-22T15:31:07.766-06:00";"Forgo_000";"5736";"C:\Program Files (x86)\Java\jre7\bin\javaw.exe";"7224";"javaw.exe";"2";"150";"112";"";"";"";"";"";"";"";"";"";"";""
"2014-09-22T15:32:44.591-06:00";"Forgo_000";"5604";"C:\Program Files (x86)\Java\jre7\bin\javaw.exe";"6752";"javaw.exe";"2";"150";"112";"";"";"";"";"";"";"";"";"";"";""
"2014-09-22T15:34:57.708-06:00";"Forgo_000";"5372";"C:\Program Files (x86)\Java\jre7\bin\javaw.exe";"1980";"javaw.exe";"2";"150";"112";"";"";"";"";"";"";"";"";"";"";""
 
OS details:
 
OS: Windows 8.1
 
Installed memory: 8.00 GB (6.93 GB usable)
 
System type: 64-bit Operating System, x64-based processor
 
No pen or touch, doesn't even matter.
 
Windows is activated.
Link to post
Share on other sites
  • 2 weeks later...
K1m0n

K1m0n

Posted
Posted

Hi. Just a heads up, as the title says.

Anti-exploit (ver 1.04.1.1012) blocks java execution on UBNT's UNIFI controller 3.2.5.

What's the controller?

Its UBNT's  local java app/server to manage WiFi networks based on UNIFI range of products.

The offending application can be downloaded here.

Launching it triggers Malware bytes anti-exploit, which in turn halts execution.

Unfortunately no further details are given, just a line in app log stating "An exploit code has been blocked in Java".

I suppose it might be an issue of malwarebytes since I find it unlikelly for UBNT devs to create malicius code

(at least on purpose, lol).

Maybe the malwarebytes stuff wants to have a look at the issue?

I did make a relevant post @ UBNT's forum to inform the other party too.

Thanks.

Link to post
Share on other sites
  • Staff
pbust

pbust

Posted
  • Staff
Posted

Yes this is a known issue. We fixed some Java FPs with 1.04 but with the introduction of a new detection technique now we're seeing a different type of Java FPs. We've fixed this already and soon we'll have a 1.05 Experimental build available that will solve this.

 

Btw merging different threads about the same issue into a single thread.

Link to post
Share on other sites
  • Staff
pbust

pbust

Posted
  • Staff
Posted

Welcome to the forum and thanks for posting.

 

This is fixed in the upcoming MBAE 1.05 version. You will receive the ugprade automatically once it becomes available.

 

In the meantime you can temporarily disable MBAE (right-click on traybar icon and choose Stop Protection) during the Java upgrade. Just remember to re-start protection afterwards.

Link to post
Share on other sites
  • Staff
pbust

pbust

Posted
  • Staff
Posted

Welcome to the forum and thanks for posting Superdw.

 

This is a known FP of MBAE 1.04 within Java. It is fixed already in the upcoming MBAE 1.05. Please keep an eye in the Experimental sub-forum to download a beta in the coming week.

https://forums.malwarebytes.org/index.php?/forum/153-experimental-mbae-builds/

 

Btw, merging this post with the existing thread on the issue.

Link to post
Share on other sites
  • 3 weeks later...
AS1

AS1

Posted
Posted

Hi Support,

 

I'm running windows 8.1 64bit edition and have found an issue with MBAE and Java 7 update 71 32bit,

 

can you try these

 

1) Open Control Panel, search for and open java, then in the Java control panel click on the About button, the Info window is displayed followed by an alert from MBAE

 

 

2) as above click on Java Update, Update now - alert from MBAE

 

 

Can you confirm this is a false alert please.

 

Thanks,

Andrew.

Link to post
Share on other sites
  • Staff
pbust

pbust

Posted
  • Staff
Posted

Hi NinjaTawn, welcome to the forum and thanks for posting!

 

This is a known issue that has been fixed in MBAE 1.05. Please upgrade to the Experimental build to verify that it is in fact fixed:

https://forums.malwarebytes.org/index.php?/topic/160317-mbae-experimental-10531010/

 

Btw, I will merge your post with the existing thread about this issue.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.