RichardIrwin Posted April 8, 2016 ID:1032506 Share Posted April 8, 2016 Have reinstalled Chrome this morning and the problem remains, a reboot also made no difference. - Richard Link to post Share on other sites More sharing options...
mistertonmick Posted April 8, 2016 ID:1032507 Share Posted April 8, 2016 i did what Pedro sugested,and it worked fine,but like others have said worried about protection so i decided i would use firefox and restored anti exploit to its proper settings,decided to try chrome again and it worked fine much to my surprise with anti exploit and rapport running. Link to post Share on other sites More sharing options...
yardbird Posted April 8, 2016 ID:1032509 Share Posted April 8, 2016 @Richardlrwin Try the following: MBAE -> Settings -> Advanced Settings -> OS Bypass Protection -> CALL ROP gadget protection (32/64) -> uncheck for Chrome -> Apply MBAE -> Settings -> Advanced Settings -> Advanced Memory Protection -> Malicious return address detection -> uncheck for Chrome -> Apply Reboot Post back & let us know please. Link to post Share on other sites More sharing options...
Staff pbust Posted April 8, 2016 Staff ID:1032516 Share Posted April 8, 2016 (merged a few threads together with this one) Even though this is a bug on Trusteer's product (and likely will conflict with other products that perform API hooking, not just MBAE), we are creating a fix on our end. We will release soon. I will post it here for all of you to test. In the meantime the safer workaround is to disable both ROP and Malicious Return Address techniques under Advanced Settings. Interestingly it is not always necessary to turn both off. Sometimes only turning off ROP is enough. And sometimes an update to Chrome and reboot (without turning off any MBAE techniques) is sufficient. But it varies between configurations. So the safest is to turn off ROP only and if it continues conflicting, then turn off Malicious Return Address detection. Link to post Share on other sites More sharing options...
RichardIrwin Posted April 8, 2016 ID:1032528 Share Posted April 8, 2016 Tried the MBAE -> Settings -> Advanced Settings -> OS Bypass Protection -> CALL ROP gadget protection (32/64) -> uncheck for Chrome -> Apply from earlier posts and it made no difference. However, I experimented with Shields Remove Shield for Chrome. Chrome worked. Closed Chrome down and reactivated the Shield and it still works. I do not have Trusteer's product, only Malwarebytes and Defender. Richard Link to post Share on other sites More sharing options...
JANW Posted April 8, 2016 ID:1032577 Share Posted April 8, 2016 I have unchecked both OS Bypass Protection and Advanced Memory Protection and now Chrome works. I am using Windows 8.1, Chrome, Trusteer, MBAE and Kaspersky. Is it safe to leave these unchecked? Link to post Share on other sites More sharing options...
JHall Posted April 8, 2016 ID:1032587 Share Posted April 8, 2016 I ran into this Chrome/MBAE/Rapport problem (under Windows 7 32-bit) today. I tried the suggested temporary workaround of adjusting MBAE's Advanced Settings and rebooting, which worked. Then I went to Trusteer's own site, to see if there was anything about the problem there. There wasn't that I could see, but it did say that the latest version of Rapport now worked with Chrome v49 and provided a link to click on to upgrade Rapport. I thought that it couldn't hurt to try that. Having updated Rapport, I restored the MBAE settings to their previous values and rebooted. This seemed to work. (Fingers crossed.) So it might be worth other people trying that. Rapport seems unusual, in that it doesn't seem to update itself automatically, or if it does then it's not very timely. Link to post Share on other sites More sharing options...
mistertonmick Posted April 8, 2016 ID:1032618 Share Posted April 8, 2016 sods law,after having it working with anti exploit and MBAE on chrome today with defaults reset and rapport working also,chrome has just updated to latest version and i got greeted with the MBAE pop up blocking chrome. Link to post Share on other sites More sharing options...
mistertonmick Posted April 8, 2016 ID:1032625 Share Posted April 8, 2016 just to add to my above post it was only the advanced memory protection that caused the stopping of chrome,CALL ROP is working OK. Link to post Share on other sites More sharing options...
FCA711 Posted April 8, 2016 ID:1032641 Share Posted April 8, 2016 38 minutes ago, mistertonmick said: just to add to my above post it was only the advanced memory protection that caused the stopping of chrome,CALL ROP is working OK. Me too. I updated Chrome manually and verified the latest Trusteer was on there. Still crashed, but after removing just the Advanced Memory Protection setting for Chrome, now all is good again. The CALL ROP is activated. So, we're making progress I think. Link to post Share on other sites More sharing options...
Morrile Posted April 9, 2016 ID:1032788 Share Posted April 9, 2016 Hello, I had the same problem with Chrome and Anti-exploit yet now I don't. What I did was uninstall Chrome then using regedit (you need to know what you are doing with this app) and removed everything related to Google and Chrome, rebooted and reinstalled a fresh Chrome, but that did not resolve the problem. So I put all the essential plugin back in, Trusteer Rapport, 1Password, Ghostery and then did an update to Adobe Flash (you should all know about the recent exploit with flash) and now it all works as it should. I suspect that something has tried to get into our systems and failed because we all have Malwarebytes installed, yet it's left some changes to flash within Google Chrome and that's caused many of us to experience a problem with Anti-exploit. I hope this helps you to resolve your issues with Chrome and Anti-exploit Morrile Link to post Share on other sites More sharing options...
Morrile Posted April 9, 2016 ID:1032790 Share Posted April 9, 2016 update on above message. got a friend who lives overseas who had the same problem, by updating Adobe Flash resolves the problem. Kind regards, Morrile Link to post Share on other sites More sharing options...
Morrile Posted April 9, 2016 ID:1032791 Share Posted April 9, 2016 Hello, The solution to Google Chrome and Anti-Exploit is to update your Adobe Flash Player. I have done this to 4 home PC and a couple of friends overseas and it works. Kind regards, Morrile Link to post Share on other sites More sharing options...
ukpixel Posted April 9, 2016 ID:1032798 Share Posted April 9, 2016 I'm using the latest Flash Player Version 21,0,0,213 and I'm blocked completely from Chrome. At first I only lost access to 'settings' in chrome then a few days later no access to Chrome at all. Link to post Share on other sites More sharing options...
ukpixel Posted April 9, 2016 ID:1032799 Share Posted April 9, 2016 I've carried out the two fixes but to no avail. (And the suggestion that updating Flash Player works? - it doesn't for me) Have to continue with Firefox as now I have no access at all to Chrome. (In a previous post I'd only lost access to 'settings' Link to post Share on other sites More sharing options...
JANW Posted April 9, 2016 ID:1032813 Share Posted April 9, 2016 I have updated Chrome to the latest version - 49.0.2623.112m Kaspersky is up to date Trusteer is up to date I do not have Adobe flash installed on my PC MBAE all settings returned to normal AND Chrome is now working - so fingers crossed it stays like it Link to post Share on other sites More sharing options...
JohnOman Posted April 9, 2016 ID:1032858 Share Posted April 9, 2016 Every time I start up Google chrome I get message in Exploit. An expxloit code has been blocked in Chrome(and plug-ins) Whats up?? John Oman Link to post Share on other sites More sharing options...
John L. Galt Posted April 9, 2016 ID:1032862 Share Posted April 9, 2016 Hi, @JohnOman, and First question: are you using Trusteer Rapport on your system along with Chrome and MBAE? Link to post Share on other sites More sharing options...
hake Posted April 9, 2016 ID:1032874 Share Posted April 9, 2016 I have experienced a similar difficulty with Windows 8.1 (64-bit), Google Chrome (x86) version 49.0.2623.112 m and Trusteer Rapport. MBAE default settings were in use. The puzzling thing is that Google Chrome works fine as a browser but when I use the Chrome Settings facility to delete browser data, MBAE shows an alert re: 'ROP exploit gadget attack blocked'. If I disable CALL ROP gadget detection, I still get a similar alert for Malicious Return Address detection. Disabling CALL ROP Gadget detection and Malicious Return Address detection for Google Chrome eliminates the behaviour. An identical setup of Google Chrome and Trusteer Rapport on Windows 7 (64-bit) Home Premium does not exhibit the behaviour in the same circumstances. This issue does not stop Google Chrome being usable. I report it in case the circumstances might inform those who are investigating this. Link to post Share on other sites More sharing options...
Gex Posted April 10, 2016 ID:1032967 Share Posted April 10, 2016 Add my name to the list of affected users. Can't access Chrome at all. Chrome Version 49.0.2623.112 m MBAE Premium Avast Ver. 11.1.2253 Rapport Ver. 1.14 (build 1609.47) Link to post Share on other sites More sharing options...
Gex Posted April 10, 2016 ID:1032969 Share Posted April 10, 2016 Seem to have got round the problem on my PC. De-installed Chrome and Flash Player. Went to Settings >> Advanced Settings in MWAE and unclicked DEP Enforcement for Chrome Browsers Deactivated Shield in MWAE for Google Chrome (under Shields tab) Reinstalled Chrome and Flash Player Reactivated Shield for Google Chrome in MWAE Re-checked DEP Enforcement for Chrome in MWAE All seems to be working OK now. Link to post Share on other sites More sharing options...
Bramble Posted April 10, 2016 ID:1032974 Share Posted April 10, 2016 Hi, I can't access Chrome at all, either. Tried to follow the suggestions above, but apparently Flash is embedded in Win8.1, so I can't uninstall it. I got a message saying to get up-to date version of IE to make sure Flash is up to date - it turns out I have the latest version already. I'll try to uninstall and reinstall Chrome to see whether that helps. Link to post Share on other sites More sharing options...
Millie56 Posted April 10, 2016 ID:1032976 Share Posted April 10, 2016 I have similar problem with the Anti-Exploit Free version + Chrome. I am able to open and use Chrome OK but it's only when I open the 'History' and then click on the 'Clear browsing data' button that the browser closes down and I get the Anti-Exploit warning notice. I have just gone back to using Firefox which I am equally happy with. Link to post Share on other sites More sharing options...
Rommel Posted April 11, 2016 ID:1033229 Share Posted April 11, 2016 And it's back again. Now I'm in for a lot of reading and following up of suggestions. Pffft. Have fun Link to post Share on other sites More sharing options...
Welshman Posted April 11, 2016 ID:1033296 Share Posted April 11, 2016 Hello .. my OS is Windows 7. Google Chrome updated today to 49.0.2623.112 (was 110) / Malware Bytes Anti Exploit 1.08.1.1189 / Anti Malware 2.2.1.1043. I have been using the software without problems prior to this. Looking at the forum I am not alone. The same problem as already reported using Google Chrome. This started a few days ago. Sometimes it works okay and others will block immediately. It is becoming annoying as I loose all the open tabs. To overcome the problem I have 'stopped' the Anti-Expoit. I am running Ashampoo Anti Virus / Webroot Secure Anywhere / IBM Rapport .. all have worked in harmony for quite a long time. Hope this issue can be resolved. I also have reminders from Microsoft to upgrade to Win 10 .. that is unlikely to happen on this notebook. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now