MBAE 1.8 Dynamic Anti-HeapSpraying causing higher CPU usage

[jackmol]

After downloading MBAE 1.8 I noticed slightly higher CPU usage than with MBAE 1.7.1.1015.  If CPU usage with 1.7 was 1% now with 1.8 CPU usage increases to 6% to 7%.  If I disable 1.8 the CPU usage reverts back to 1% immediately without leaving whichever web page I am on.  If I reinstall version 1.7.1.1015 there is no issue with higher CPU usage.

 

I am a Windows 7 user.  The higher usage is occurring with both web browsers I have installed on my notebook...Internet Explorer 11 and Firefox 42.

 

Anyone else noticing this and if so, is there a solution?  Thank you.  

 

 

 

[pbust]

Welcome to the forum @jackmol and thanks for posting.

 

We haven't had a CPU impact issue before, so I'd like to find out what's the problem in your case.

 

Can you please attach or PM me your MBAE logs? You can find instructions in the "readme first" link in my signature.

[jackmol]

Thank you Pedro.  Attached is the zip file you requested.  I did revert back to version 1.7 so please let me know if you need me to again update to version 1.8 and again send logs. 

Malwarebytes Anti-Exploit.zip

[pbust]

Thanks for the logs. I see some errors in the logs that indicate that you probably have some other software on your machine that's preventing API hooking within IE.

 

Can you please post or PM me your FRST logs? Instructions again in the "readme first" link.

 

Thanks!

[jackmol]

Thanks for the logs. I see some errors in the logs that indicate that you probably have some other software on your machine that's preventing API hooking within IE.

 

Can you please post or PM me your FRST logs? Instructions again in the "readme first" link.

 

Thanks!

Attached are the two (2) FRST logs you requested. Again, I have no problems with CPU usage when using MBAE 1.7.  Also, no errors when using MBAE 1.8.  It's just that I notice slightly higher CPU usage with MBAE 1.8 but it is working.   

 

Thank you Pedro for your assistance.

FRST.txt

Addition.txt

[pbust]

Hi Jack, I'll send you a PM with further troubleshooting instructions.

[jackmol]

Hi Pedro,

 

I sent you a PM.  Followed steps and cannot replicate higher CPA usage.  In other words, no increase in CPU usage.  See my PM.  Thank you. 

 

Jack

[pbust]

After much back and forth it seems it is a conflict between the Dynamic Anti-HeapSpraying technique and certain applications (in this case Norton). We'll continue investigating to see if we can find a fix.