[SOLVED] MBAE blocks Chrome-Call ROP Gadget detection (32-bit)

[JadedSoulX]

Every time I load Google Chrome anti-exploit blocks Chrome under the Call ROP Gadget detection (32-bit).

I have tried disabling all addons and the problem still persists.

I have Ad-Block Plus, Google Analytics Opt-out Add-on (by Google), IBA Opt-out (by Google), Google Docs and Google Sheets installed as extensions.

I have scanned for malware under Chameleon and my system is clean.

Help is appreciated!

[pbust]

Welcome to the forum and thanks for posting.

 

Please attach your MBAE and FRST logs. Instructions can be found in the "readme first" link in my signature.

[JadedSoulX]

Thanks you for the reply, pbust.

 

I have attached the logs to this post.

FRST.zip

Malwarebytes Anti-Exploit.zip

[pbust]

Thanks for the logs. Nothing out of the ordinary.

 

Interestingly I see that your MBAE upgraded to the latest 1.07.1.1015 over a week before the alerts started happening with Chrome. Did you install some other software today or changed some configuration that may have caused these alerts to start happening?

 

Just to confirm, if you go to MBAE UI -> Settings -> Advanced Settings -> OS Bypass Protection -> Uncheck both ROP techniques for ChromeBrowser -> Apply

 

Does the problem persist after the configuration change?

[JadedSoulX]

@pbust. Yes, I did install new software today.

Apparently, there is some conflict between Anti-Exploit, Chrome and Noldus Ethovision.

I rolled back to the old version of Ethovision and the problem disappeared.

You can close this thread.

 

Thank you for your help!

[pbust]

Thanks for confirming and for the information!

[pbust]

Btw thanks for the logs. We found the root of the problem and are adding a fix for MBAE 1.08 so that it is compatible with the latest Noldus Ethovision.