New Exploit update causes HP driver issues

[scoutt]

I see from the update page that we have a new version being pushed.

Quote

Malwarebytes Anti-Exploit 1.13.2.257

Protection:
 
•    Protection against new exploit attack vectors
 
Stability/issues fixed:
 
•    Fixed a bug in Chrome and Edge browser shields
•    Fixed customer issues with MS Office applications
•    Fixed customer issues with Bank plugins 
•    Improved Logging capabilities
•    Internal Product Improvements

But apparently the "Fixed customer issues with MS Office applications" is now causing lots of HP driver issues when printing from word.  

Quote

Exploit payload process blocked BLOCK   C:\Windows\System32\rundll32.exe C:\WINDOWS\system32\spool\DRIVERS\x64\3\hpmsn130.DLL,MonitorPrintJobStatus \pjob=19 \pnameNW Corner HP LaserJet color M551        User             Microsoft Office Word   C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE      Attacked application: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE; Parent process name: explorer.exe; Layer: Application Behavior Protection; API ID: 207; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Anybody else seeing these? Just started yesterday when users started updating. Changing the driver to a Universal driver fixes some of them.

[exile360]

Thank you for reporting this issue.  I've made a note of it for the Product team while you await a response from a member of the staff.  I hope the issue is resolved quickly.

[scoutt]

Thank you sir.

Also noticed that this DLL will be different depending on what HP driver is installed "x64\3\hpmsn130.DLL"

Also we have noticed a very big slow down on some excel spreadsheets. Very slow loading and saving. Upgrade to the Nebula client and slowness goes away. Spreadsheets range in size from 100K to 1mb, all are real slow.

[exile360]

Thanks for the additional info, I've made a note of it as well and will likewise report it to the team for the Devs to investigate.

In the meantime I'll ping the Technical Product Manager for Malwarebytes Anti-Exploit to take a look.

@Arthi would you please take a look when you have a chance?  Thanks

[Arthi]

Hi,

Thanks for your post. I want to make sure the following setting is turned OFF. Please turn it OFF it is not.

If this does not resolve your issue, please attach the zipped version of following folder

C:\ProgramData\Malwarebytes Anti-Exploit

Thanks.

[scoutt]

Sorry guys, the problem was so bad we had to upgrade to Nebula really fast. I will have to create a ticket because now that Nebula upgraded to the 4.2.1.90 version we are seeing the same thing as we did in the on-prem version. Except we do not see the HP driver issue. 

[AdvancedSetup]

Please let me know once you've created a ticket @scoutt and what the number is and I'll see if I can alert someone to it any quicker.

Cheers