False Positive: MBAE 1.09.2.1384 - HP Scanning

[REGITDept]

Dear Malwarebytes,

We would like to report a false positive with the latest version of MBAE (1.09.2.1384) with the HP Scanning application.

Exploit was blocked when scanning.

We are running Windows 7 Pro 64 bit in a Domain environment.

Please look at attached logs file.

Thanks.

Malwarebytes Anti-Exploit.zip

[Rsullinger]

Hey REGITDept,

 

Do you mind getting me the frst logs from this post:

 

Going to get this over to our team so they can look into it and get it fixed. 

[REGITDept]

Hi Ron,

Attached you will find the FRST logs you are looking for.

Thanks.

FRST.zip

[Rsullinger]

Thank you for the logs.

 

I am getting this over to the team right now to take a look at it. I will let you know when I have an update from them! 

[REGITDept]

Great !

Thank you Ron.

[Rsullinger]

Hey REGITDept,

 

I have an update for you on this issue. They created a test build that they believe should fix the issue but they want to get a few confirmations. Can you try this build on the machine:

https://malwarebytes.box.com/s/1wfy1x2dbjud4bt6i5f97qm8v3wq19rf

 

and let me know if it fixes it or not? 

 

Thank you! 

[waterskibumfl]

Having the same issue on a wireless HP Printer. Installed this patch and seemed to take care of it. Thanks!

[Rsullinger]

Awesome! Thank you for the confirmation! 

[REGITDept]

Hi Ron,

Build 1394 seems to resolved this issue.

Thanks.

[billmobile1]

Will this build (or a patch) be pushed out any time soon with updates for Enterprise clients? 

I have around 300 seats using Enterprise Edition Anti-malware/Anti-exploit, a majority of which are spread out around the country using cellular hotspots... a GP pushed update for the client is troublesome and hit or miss at best (since they arent always authenticating to the domain and getting a group policy update), so an update via the clients built in updater would be perfect.

 

Thanks!!

[Rsullinger]

Hey Billmobile1 and all,

 

There will be a new update pushed out for mbae later today through our automatic updates. It will include the fix for this issue reported in this thread. If you have automatic update enabled, your clients will receive this build as well. 

[billmobile1]

4 minutes ago, Rsullinger said:

Hey Billmobile1 and all,

 

There will be a new update pushed out for mbae later today through our automatic updates. It will include the fix for this issue reported in this thread. If you have automatic update enabled, your clients will receive this build as well. 

That is great news, thank you so much!