MalwareBytes Anti-Exploit 1.07.1.1015 free version.

[LabZero]

Hello everyone, this is my review of MAE

Introduction

The exploit is a code that exploits a vulnerability against unsolved software (why not fixed by installing the latest updates or why not yet remedied by application vendor), permits to carry out potentially harmful actions without the user's knowledge, acquire higher privileges or cause DoS attacks.
Exploits that focus on zero-day flaws are more dangerous because they are targeting security holes that are not readily resolvable (generally through installing patches) from users.

Malwarebytes Anti-Exploit (free version) protects against vulnerabilities: Java, Firefox, Chrome, Internet Explorer, Opera and their addons, extensions.

The Premium version of MAE extends its protection to other software including PDF readers such as Adobe Reader, Adobe Acrobat, Foxit Reader, the Office suite,Microsoft Word, Excel and Powerpoint and media players including Windows Media Player, VideoLAN VLC Media Player, QuickTime Player, Winamp Player.
Possibility to add custom protectors.

 

[Online_Sword]

Compatible with other security apps.

Hi, would mbae be compatible with other anti-exploit programs or other antivirus programs with the capability of anti-exploit?

 

[LabZero]

Hi, would mbae be compatible with other anti-exploit programs or other antivirus programs with the capability of anti-exploit?

I don't think bacause of possible shellcode conflicts.

 

[Online_Sword]

I don't think bacause of possible shellcode conflicts.

Sorry but I have not understood what you mean...
I guess you mean mbae will conflict with AV with anti-exploit features, right?

 

[LabZero]

Sorry but I have not understood what you mean...
I guess you mean mbae will conflict with AV with anti-exploit features, right?

According to the documentation, MAE monitors shellcode by intercepting certain API.
Now I don't know if the AE features of certain antivirus works according to the same principle.
If so there may be conflicts and in this case besides, MAE would not be necessary.

 

[frogboy]

I love this software it is a great freeware.

 

[Solarlynx]

MBAE is designed to be compatible with EMET. When I used both it was so.

As for compatibility with AV on my PCs MBAE gets along with Avast, Comodo, ZoneAlarm FW, Zemana AL, NovirusThanks ExeRadarPro (though there might be no anti-exploit features I admit). It's better to test it, difficult to predict. MBAE free gives additional layer of protection for browsers and Java - the most insecure threat-gates.

 

[LabZero]

MBAE is designed to be compatible with EMET. When I used both it was so.

As for compatibility with AV on my PCs MBAE gets along with Avast, Comodo, ZoneAlarm FW, Zemana AL, NovirusThanks ExeRadarPro (though there might be no anti-exploit features I admit). It's better to test it, difficult to predict. MBAE free gives additional layer of protection for browsers and Java - the most insecure threat-gates.

EMET is not compatible according to Known Issues & Conflicts - Anti-Exploit Product Support - Malwarebytes Forum
However EMET can be configured to run alongside MBAE Free as per guidance from users.

 

[Deleted member 178]

MBAE prem > EMET > MBAE free

From what i read in various forums.

 

[Solarlynx]

But for browsers and Java:

MBAE free >> EMET

just IMHO.

 

[Online_Sword]

MBAE prem > EMET > MBAE free

From what i read in various forums.

But for browsers and Java:

MBAE free >> EMET

just IMHO.

How about adding Hitman.Alert into your inequalities?

 

[Deleted member 178]

No idea, i never had the chance to have a registered version

But people say it is better than MBAE , i just see it has more features, but i dont know in term of effectiveness.

 

[ha14]

Nice review

Not an antivirus, but compatible with most antivirus, Malwarebytes Anti-Exploit is a small, specialized shield designed to protect you against one of the most dangerous forms of malware attacks. And it's free.

 

[jamescv7]

MBAE works as globally with different techniques for prevention measures against exploit compare to EMET however that reference is way back likely 2 years old and both already enhance to improve contiuously.

Also both can run together as possible.

 

[Cch123]

Hi, would mbae be compatible with other anti-exploit programs or other antivirus programs with the capability of anti-exploit?

The ROP mitigations of EMET and MBAE would conflict, and it is not advisable to use both at the same time. You will need to disable EMET's rop functionality to prevent conflicts with MBAE's hooks when running both together.

No idea, i never had the chance to have a registered version

But people say it is better than MBAE , i just see it has more features, but i dont know in term of effectiveness.

Main advantage of HMP.A over MBAE is that HitmanPro uses last branch tracing for ROP protection, or what it calls "hardware assissted exploit mitigations". This is far more difficult to bypass than the stack based methods used by EMET and MBAE. Hence some would say HMP.A is more secure than MBAE.

 

[Solarlynx]

How about adding Hitman.Alert into your inequalities?

I tried only free Hitman.Alert so I have no idea where it stands in the inequalities, sorry.

MBAE works as globally with different techniques for prevention measures against exploit compare to EMET however that reference is way back likely 2 years old and both already enhance to improve contiuously.

I would say MBAE uses additional layers of protection. Techniques (with respect to exploit mitigation) are not so globally different. Though here we might be lost in terms.

 

[jamescv7]

@Solarlynx: Well the link state which MBAE may act as global due to complete techniques as possible for anti-exploit.

 

[RmG152]

1MB? or 11?

 

[LabZero]

1MB? or 11?

View attachment 75017

RAM usage rarely reached 3MB on my PC test. Average consumption 1 MB.

 

[LabZero]

RAM usage rarely reached 3MB on my PC test. Average consumption 1 MB.

MBAE active process on my system (all users processes)