Jump to content

New Exploit update causes HP driver issues


Recommended Posts

I see from the update page that we have a new version being pushed.

Quote

Malwarebytes Anti-Exploit 1.13.2.257

Protection:
 
•    Protection against new exploit attack vectors
 
Stability/issues fixed:
 
•    Fixed a bug in Chrome and Edge browser shields
•    Fixed customer issues with MS Office applications
•    Fixed customer issues with Bank plugins 
•    Improved Logging capabilities
•    Internal Product Improvements

But apparently the "Fixed customer issues with MS Office applications" is now causing lots of HP driver issues when printing from word.  

Quote

Exploit payload process blocked BLOCK   C:\Windows\System32\rundll32.exe C:\WINDOWS\system32\spool\DRIVERS\x64\3\hpmsn130.DLL,MonitorPrintJobStatus \pjob=19 \pnameNW Corner HP LaserJet color M551        User             Microsoft Office Word   C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE      Attacked application: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE; Parent process name: explorer.exe; Layer: Application Behavior Protection; API ID: 207; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Anybody else seeing these? Just started yesterday when users started updating. Changing the driver to a Universal driver fixes some of them.

Link to post
Share on other sites

Thank you sir.

Also noticed that this DLL will be different depending on what HP driver is installed "x64\3\hpmsn130.DLL"

Also we have noticed a very big slow down on some excel spreadsheets. Very slow loading and saving. Upgrade to the Nebula client and slowness goes away. Spreadsheets range in size from 100K to 1mb, all are real slow.

Link to post
Share on other sites

Thanks for the additional info, I've made a note of it as well and will likewise report it to the team for the Devs to investigate.

In the meantime I'll ping the Technical Product Manager for Malwarebytes Anti-Exploit to take a look.

@Arthi would you please take a look when you have a chance?  Thanks

Link to post
Share on other sites
  • Staff

Hi,

Thanks for your post. I want to make sure the following setting is turned OFF. Please turn it OFF it is not.

If this does not resolve your issue, please attach the zipped version of following folder

C:\ProgramData\Malwarebytes Anti-Exploit

image.png.f0d469135628f34795774630d4ab3606.png

Thanks.

Link to post
Share on other sites
  • 4 weeks later...

Sorry guys, the problem was so bad we had to upgrade to Nebula really fast. I will have to create a ticket because now that Nebula upgraded to the 4.2.1.90 version we are seeing the same thing as we did in the on-prem version. Except we do not see the HP driver issue. 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.