I just reinstalled my computer and found out that Malwarebytes Anti-Exploit has been discontinued (probably?) and is only available now as a beta. I am looking for product that could replace this software. I am mainly looking for low resources usage! Malwarebytes Anti-Exploit only used a few megabytes of RAM. I use Avira Antivirus Free and Comodo Firewall Free.
Which Anti-Exploit software should I use?
- Thread starter RXZ6Q
- Start date
The list of commonly targeted softs is given right in MBAE and EMET. All the user needs to do is get that list.
- Feb 19, 2017
- 44
My first impression about Sophos is how they seperate their Sophos Home into "pieces". When I want to uninstall "it", I need to uninstall each one of "them". That... is...not... cool if you know what I mean.
If you're only looking to protect your browsers, MBAE Free works well. If you're willing to pay for the MBAE Premium then you'll get protection for some of the most targeted programs out there.
EMET works too but I've personally had some compatibility issues with wrapping its protection around certain programs in the past. Also Microsoft are dropping support for it in July 2018. (Huge mistake in my opinion. Businesses especially will suffer for this.)
Never tried HMPA so I can't comment on it, but I know a good amount of people hold it in high regard.
EMET works too but I've personally had some compatibility issues with wrapping its protection around certain programs in the past. Also Microsoft are dropping support for it in July 2018. (Huge mistake in my opinion. Businesses especially will suffer for this.)
Never tried HMPA so I can't comment on it, but I know a good amount of people hold it in high regard.
Last edited:
They aren't the only ones that do it; Bitdefender, COMODO, Norton, etc. In Enterprise it is more common.
- Feb 19, 2017
- 44
I think it might be an anti-tamper mechanism as opposed to just to annoy the user but I am not so sure. I might be able to ask a contact of mine who does software engineer work with Sophos to try and find out for you.
- Feb 19, 2017
- 44
Thanks. That could be very helpful with Sophos users or any others would like to give it a try.
Sorry, guys, I forgot to mention that I was using paid version of Malwarebytes 
So I misled you. Feel free to offer any paid solution, I am not looking for free software
The Comodo protecting against exploits is really interesting, does anyone else knows more?
I am running Windows 10 and already using SumatraPDF
I try to update my software as much as I can, but I still have to use Microsoft Office and Flash.
As a gamer, running Linux is not a option for me.
HitmanPro.Alert seems to be really interesting, do any of you guys have information about resorce usage and compatibility with my soft? BadUSB protection is amazing.
How good is EMET compared to HMP.A and MBAE in terms of performance and zero-day protection?
So if I decide to continue using MBAE - should I run the old version or the new beta version?
So I misled you. Feel free to offer any paid solution, I am not looking for free software The Comodo protecting against exploits is really interesting, does anyone else knows more?
I am running Windows 10 and already using SumatraPDF
I try to update my software as much as I can, but I still have to use Microsoft Office and Flash.
As a gamer, running Linux is not a option for me.
HitmanPro.Alert seems to be really interesting, do any of you guys have information about resorce usage and compatibility with my soft? BadUSB protection is amazing.
How good is EMET compared to HMP.A and MBAE in terms of performance and zero-day protection?
So if I decide to continue using MBAE - should I run the old version or the new beta version?
HitmanPro.Alert IMO.Sorry, guys, I forgot to mention that I was using paid version of Malwarebytes
HMP.A works differently but it is the most powerful in terms of capabilities, but either EMET or MBAE is fine too.
MBAE stable version not beta unless you don't mind occasional bugs it might bring. Stable can have bugs too but there won't be as many...
- Jul 3, 2015
- 8,153
HMPA is a powerful software, it does not impact system performance, it uses 0% CPU or close to it, it uses about 12 MB RAM.
But... it is famous for conflicting with software and hardware (certain USB peripherals)
You just have to try it and see if it works with your config, and if not, maybe their beta version (they always are pushing out another beta version) solves your conflict.
It's good enough to make it worth the hassle.
But... it is famous for conflicting with software and hardware (certain USB peripherals)
You just have to try it and see if it works with your config, and if not, maybe their beta version (they always are pushing out another beta version) solves your conflict.
It's good enough to make it worth the hassle.
It does impact system performance, the same way everything which behaves like HitmanPro.Alert will impact on system performance. The 0% CPU doesn't mean it doesn't use any CPU usage, every running program uses the CPU because it'll be running in the background, I don't know how Task Manager works with it myself...
HitmanPro.Alert works with process injection which means the memory of other running programs will increase; the memory usage of the monitored programs won't use a lot of additional memory since HMP.A is genuinely light but it depends.
Since it injects into processes, there must be a reason to need to do this... Hooks! Hooks will allow them to log the behavior of the running program. This means when the hooked (or "detoured" is a more professional term for it) functions are triggered (so when the targeted functions are called and it leads to the custom code written by HMP.A alert before Windows processes the API call properly), they log this information which will be beneficial in identifying certain behavior.
- Jun 14, 2015
- 857
Not a mistake: it's because they've been incorporating these capabilities in Windows; EMET was just a gap-filler.
cf. Moving Beyond EMET
To not use software "because it's targeted more frequently" is like saying "don't have money or buy stuff--you'll get targeted more frequently". Instead, use what you need, don't have extra, keep it up to date (Secunia PSI has problems and SUMo/DUMo does a far better job).
- Aug 2, 2015
- 4,286
- Nov 17, 2016
- 1,242
Yeah. Updates are your best bet in exploit protection. It's in the mandatory section in asd.gov.au . You also already have both Comodo Firewall for a usable whitelist and a good antivirus to deal with anything extra. Adding more will just bog down your system or possibly lead to incompatibilities. More chances to fail. You just need that little extra self-control to not download that extra soft.
- Jul 3, 2015
- 8,153
The Wave knows about a million times better than me how these apps actually work, but as a user, I don't feel that HMPA makes my system slower or less responsive.It does impact system performance, the same way everything which behaves like HitmanPro.Alert will impact on system performance. The 0% CPU doesn't mean it doesn't use any CPU usage, every running program uses the CPU because it'll be running in the background, I don't know how Task Manager works with it myself...
HitmanPro.Alert works with process injection which means the memory of other running programs will increase; the memory usage of the monitored programs won't use a lot of additional memory since HMP.A is genuinely light but it depends.
Since it injects into processes, there must be a reason to need to do this... Hooks! Hooks will allow them to log the behavior of the running program. This means when the hooked (or "detoured" is a more professional term for it) functions are triggered (so when the targeted functions are called and it leads to the custom code written by HMP.A alert before Windows processes the API call properly), they log this information which will be beneficial in identifying certain behavior.
Caveat: if you start piling on the security softs, one on top of another, then it is likely that you will start to feel a general slowdown in system responsiveness.
Radical idea: if the OP is serious about exploit protection, he should dump COMODO and switch to ReHIPS, which allows one to elegantly isolate all vulnerable programs, as well as control system processes.
Don't get me wrong, implementing the protections afforded by EMET into Windows itself can only be a good thing but I think Microsoft is forgetting that Windows 7 still holds a market share majority by almost 50%. It isn't such a big deal with consumers; I'm betting most people haven't even heard of EMET, but when it comes to businesses it's a whole different story. With the amount of time it takes a large business to migrate to an entirely new OS I feel Microsoft's being a little premature on ending support for it. (Although to their credit, they did extend the end-of-life time by 18 months but only because they were put under so much pressure.)
You're right about Secunia. Ran a scan with both Secunia and SUMo; Secunia found no updates, SUMo found 6. Guess I'm switching update software. Thanks.
Last edited:
- Jan 26, 2016
- 150
It definitely does. I've received a handful or more browser intruder alerts from HMP.alert, in which my AV missed. And doing a good amount of online banking/commerce, this is extremely important to me. Personally I think your best bet is going with HMP.alert and keeping your apps up to date. I've used Secunia in the past, but felt it can slow down your system a bit. In my case, I feel no slow downs with HMP.alert. As you can see, it offers more exploit mitigation than the competition.
Attachments
Last edited:
If those browser intrusion alerts are legitimate, then that means that there is an active infection already on your system...
Banking trojans and other financial malware just don't run from a webpage inside your browser without touching your system - they're actually installed onto your system.
You better get someone to either check out those HMP.A alerts or take a look at your system.
Similar threads
