false positive Java "Malware.Exploit.Agent.Generic" "Java Process Launcher"

[RobSM]

Trying to launch a java applet from old IE program to run building automation controller... INSTEON / Universal Devices applet.

How to add exclusion for this????

[exile360]

Greetings,

You will likely need to configure the security settings to allow execution of Java in IE.  I don't know what the settings look like in Nebula, however in the consumer client it's found under the Security tab in settings, accessible by clicking the Advanced settings button under the Exploit Protection section:

[RobSM]

doesn't appear to be a section for these settings in cloud / Nebula version.

Malwarebytes just kills the applet & doesn't appear to be a way to provide an exclusion or other way to allow the java applet to run.

If I uninstall Malwarebytes, the applet works fine.

Reinstall Malwarebytes Nebula & again the applet is killed.

[exile360]

The settings should be there according to the information in this support article unless they have changed the product since then.

Please let us know if you still have trouble locating the options.

Thanks

[Porthos]

Add or edit exclusions in Malwarebytes Nebula platform

 

Edited October 2, 2020 by Porthos

[exile360]

More info on the Advanced Settings for Exploit Protection are located in this support article.

[exile360]

Just now, Porthos said:

Add or edit exclusions in Malwarebytes Nebula platform

Exclusions aren't likely to work for a heuristic/behavior based Exploit Protection detection, but it's certainly worth a try.  More often than not, the actual setting/shield blocking the object needs to be disabled.

[RobSM]

THANKS... the policy change did the trick.

I hadn't seen the "advanced pop-up menu for Java & other apps... see below for the location of the "Advanced Settings" & the change that resolved this. unchecking "outbound shell protection" resolved it.

[exile360]

Excellent, I'm glad that you were successful in getting it to work

If there is anything else we can help with please let us know.

Thanks