Malwarebytes Anti-Exploit - wersje stabilne

Malwarebytes Anti-Exploit to prosty, ale skuteczny program, który automatycznie chroni przed działaniem rozmaitych exploitów, czyli złośliwego kodu, umożliwiającego przejęcie kontroli nad danymi i komputerem dzięki lukom bezpieczeństwa w systemie oraz aplikacjach. Istotną funkcją Anti-Exploit jest osłona przed exploitami 0-day, wobec których twórcy systemu lub oprogramowania nie stworzyli jeszcze żadnych poprawek.

Typowy antywirus nie poradzi sobie z tego typu zagrożeniem, jest ono po prostu zbyt mało znane. Tymczasem aplikacja działa właściwie w odwrotny sposób niż programy antywirusowe, gdyż zamiast skanować komputer w oparciu o bazę definicji wirusów, nie dopuszcza do wykonania niebezpiecznego kodu, roztaczając ochronę w czasie rzeczywistym nad systemem, przeglądarkami i innym oprogramowaniem. Program zablokuje słynne pakiety z exploitami - Blackhole, Sakura, Phoenix, Incognito itd.

Tarcze ochronne Anti-Exploit obejmują swoją osłoną:

• Windows Scripting Host - programowe środowisko interpretacji i wykonywania skryptów w systemie Windows,
• przeglądarki - Mozilla Firefox, Internet Explorer, Google Chrome, Opera,
• platformę Java,
• Adobe Flash i Shockwave,
• programy do obsługi PDF - Adobe Acrobat Reader i Foxit Reader,
• Pakiet Microsoft Office,
• odtwarzacze multimediów - Windows Media Player, VLC Player, Winamp, QuickTime Player,
• pomoc systemu Windows.

Malwarebytes Anti-Exploit to kolejna wersja narzędzia ExploitShield, stworzonego przez developerów ZeroVulnerability. Firma Malwarebytes 20 czerwca 2013 roku przejęła ZeroVulnerability, wobec czego aplikacja jest rozwijana teraz pod inną nazwą.

Interfejs graficzny programu nie prezentuje się zbyt nowocześnie, ale najważniejsza w tym przypadku jest skuteczna ochrona. Obsługa Anti-Exploit sprowadza się do prostego zatrzymywania lub uruchamiania tarcz, przy czym wykonywane jest to dla wszystkich z nich jednocześnie. Być może w edycji biznesowej dostępne będzie zarządzanie poszczególnymi tarczami, podobnie jak wcześniej w ExploitShield Corporate. W programie istnieje zakładka umożliwiająca dodawanie wyjątków, które mają zostać wykluczone z osłony, ale niestety funkcja ta póki co nie działa. Aplikacja informuje nas o aktualnie chronionych komponentach wyświetlając zwięzłe komunikaty w zakładce startowej lub w swoim logu. W wypadku wykrycia zagrożenia pojawia się okno alarmowe, a exploit jest blokowany i przenoszony do kwarantanny. Program wysyła również raport o exploicie do dalszej analizy przez firmy antywirusowe itp.

Malwarebytes Anti-Exploit przysłuży się wszystkim użytkownikom jako dodatkowe zabezpieczenie oprócz programu antywirusowego. Społeczność hakerów tworzących nowe exploity wciąż się rozwija, tymczasem są one dużym zagrożeniem. Dopóki pozostają nieznane dla antywirusów i innego anty-malware, mogą bezkarnie powodować poważne szkody dla zwykłych użytkowników jak i całych firm. W takiej sytuacji zainstalowanie Malwarebytes Anti-Exploit będzie dobrym rozwiązaniem.

Uwaga!
Instalator wykrywa, z jakiej korzystamy architektury i instaluje odpowiednią wersję programu - 32 lub 64 bit.

Kliknij aby rozwinąć...

New Features:
• Engine (DLL) code re-write to improve stability and compatibility.
• Added mitigations DEP Enformcement, Anti-HeapSpraying and BottomUp ASLR.
• Added new Layer0 "Application Hardening" protections.
• Added Layer1 new generic ROP protection mitigations.
• Added Layer1 new StackPivoting 64bit protection mitigation.
• Added Layer2 new caller mitigations for 64bits.
• Added Layer3 new application behavior mitigations.
• Added trial mode to allow for testing of Premium version.
• Added Quarantine of blocked payloads from Layer3 detections.
• Added filename details for default and custom shields.
• Added graphic user interface bitmaps.
• Added new "Protection stopped" traybar balloon.
• Added new counter which counts apps instead of processes.

Improvements:
• Improved IPC communication between Service and protection DLL.
• Improved management of 64bit processes by keeping mbae64.exe running.
• Improved "other" custom shield profile to reduce potential FPs.
• Improved Foxit Reader default shield to shield the latest version.
• Improved exploit threat telemetry and logging.

Fixes:
• Fixed false positive when opening Word or Excel under certain conditions.
• Fixed false positive when installing and running Silverlight for the first time.
• Fixed injection driver to resolve conflicts with third-party applications.
• Fixed multi-select and edit options in Shields and Exclusions tab.
• Fixed traybar icon right-click bug under Windows 8.1.
• Fixed UI closing when right-clicking on traybar icon.
• Fixed bug when double-clicking the traybar icon with UI open.
• Fixed issues with shielded apps counter with Chrome and Java.
• Fixed bug when uninjecting under certain conditions.
• Fixed remaining issues which caused Java FPs under certain conditions.
• Fixed DoS condition in the MBAE driver.

Kliknij aby rozwinąć...

Fixed memory leak under Windows 8.

Kliknij aby rozwinąć...

New Features:
Added new Layer3 mitigations for IE, Java and Office.
Added default protection for more popular browsers.
Added Chromium-based browser application family.
Added new alert window with exploit details.
Added protection traybar tooltip notification.
Added advanced configuration of mitigations per family.
Added configuration for general settings.
Added browse button when adding custom shields.
Added new mechanism to reduce known false positives.
Added anonymous submission of blocked exploits.
Added confirmation window for file-format exploit submissions.
Added Premium notifications in Free/Trial builds.
Added support for Windows 10.
Improvements:
Improved upgrade process to maintain existing custom shields.
Improved visibility in GUI of Management Console exclusions.
Improved error and crash reporting.
Improved missing GUI notification for guest user accounts.
Improved managed installation to avoid Start Menu folder creation.
Fixes:
Fixed false positive with Word or Excel under certain conditions.
Fixed false positive with LoadLibrary exploit mitigation.
Fixed false positive with web-based Java applications.
Fixed bug with timestamp conversions.
Fixed bug which could cause protection to stop during startup.
Fixed bug whereby LUA could start/stop protection.

Kliknij aby rozwinąć...

Improvements:
Improved settings tab by removing the need for Apply button
Fixes:
Fixed bug when trying to activate invalid license
Fixed user interface bug in settings tab

Kliknij aby rozwinąć...

New Features:
Added new Layer0 exploit mitigations for IE VB scripting
Added new Layer1 exploit mitigations for ROP detection
Added new Layer3 exploit mitigations for Powershell abuse
Added telemetry from Firefox & Chrome
Added ability to edit custom shields
Added ability to log protection events to UI
Added ability to auto-upgrade corporate builds
Added support for Windows 10
Added blacklisting of pirated and fraudulent license keys
Improvements:
Improved Java shield in corporate environments
Improved exploit telemetry
Removed duplicate default shields for portable browsers
Fixes:
Fixed issue when printing to Adobe PDF
Fixed issue with Speedbit Download Accelerator
Fixed issue with plugins from PowerDVD and GAS Tecnologia
Fixed issue with nProtect GameGuard Anti-Cheat
Fixed issue with certain exclusions not respected
Fixed issue with Knowledge Coach Office Add-In
Fixed issue with false positive from IE
Fixed issue with Foxit Reader startup
Fixed issue with Excel PowerQuery
Fixed issue with Excel DEP Enforcement

Kliknij aby rozwinąć...

Improvements:
Removed "shielded applications" counter from UI
Fixes:
Fixed issue with Arcom Masterworks

Kliknij aby rozwinąć...

New Features:
Added Layer0 Dynamic Anti-HeapSpraying mitigation
Added Layer0 Anti-Exploit fingerprinting mitigation
Added Layer0 finetuned VBScript mitigation for IE
Added Layer1 ROP-RET gadget detection mitigation
Added Layer3 Application Behavior rules
Added protection for Microsoft Edge
Added protection for LibreOffice
Added failover upgrade mechanism
Added auto-recovery for Anti-Exploit service
Fixes:
Fixed conflict with third-party products that use the same hooks
Fixed conflict with Office family profile
Fixed conflict with banking software plugin for browsers
Fixed conflict with Citrix when opening IE
Fixed conflict with components from Asus and Huawei
Fixed conflict with Kaspersky 16
Fixed conflict with Comodo
Fixed conflict with Imprivata OneSign
Fixed issue when custom shields were not kept after upgrade
Fixed issue with exclusions sometimes not applied to PDF profile
Fixed issue with Layer3 Application Behavior
Fixed issue with missing balloon notifications
Fixed issue with missing balloon notifications
Fixed false positive with Adobe Acrobat
Fixed false positive with certain .NET modules under IE
Fixed PhantomPDF crash when converting to doc

Kliknij aby rozwinąć...

New Features
Added Layer0 Dynamic Anti-HeapSpraying mitigation
Added Layer0 Anti-Exploit fingerprinting mitigation
Added Layer0 finetuned VBScript mitigation for IE
Added Layer1 ROP-RET gadget detection mitigation
Added Layer3 Application Behavior rules
Added protection for Microsoft Edge
Added protection for LibreOffice
Added failover upgrade mechanism
Added auto-recovery for Anti-Exploit service

Fixes
Fixed conflict with third-party products that use the same hooks
Fixed conflict with Office family profile
Fixed conflict with banking software plugin for browsers
Fixed conflict with Citrix when opening IE
Fixed conflict with components from Asus and Huawei
Fixed conflict with Kaspersky 16
Fixed conflict with Comodo
Fixed conflict with Imprivata OneSign
Fixed issue when custom shields were not kept after upgrade
Fixed issue with exclusions sometimes not applied to PDF profile
Fixed issue with Layer3 Application Behavior
Fixed issue with missing balloon notifications
Fixed issue with missing balloon notifications
Fixed false positive with Adobe Acrobat
Fixed false positive with certain .NET modules under IE
Fixed PhantomPDF crash when converting to doc

Kliknij aby rozwinąć...

We've just posted the auto-upgrade to build 1189. Your MBAE should auto-upgrade over the next few hours/days.
The new downloads link will be updated shortly.

Zaloguj lub Zarejestruj się aby zobaczyć!

As for the post being from August 13, it is true, but it gets edited often to point to newer builds. The 1189 version is a hotfix to 1045 and intermediate builds were for testing the hotfix.

Changelog of 1189 over 1045 is as follows:

Fixes:
• Improve fingerprinting detection
• Improve Layer1 stability
• Fix for Windows 10 injection bug
• Fix for Chrome 64bits protection
• Fix for BitDefender bug causing conflicts
• Fix false positive condition in Java shield
• Fix potential memory leak condition

Kliknij aby rozwinąć...

1.08.1.1196 / April 27, 2016

New features

Added Layer1 self-protection mechanisms for MBAE DLL
Improved Layer1 Stack Pivoting detection technique
Improved Layer3 Application Behavior protection
Improved self-protection for MBAE IPC

Kliknij aby rozwinąć...

New Features:
Added Layer1 self-protection mechanisms for MBAE DLL
Improved Layer1 Stack Pivoting detection technique
Improved Layer3 Application Behavior protection
Improved self-protection for MBAE IPC

Kliknij aby rozwinąć...

New Features:
Added Layer1 self-protection mechanisms for MBAE DLL
Improved Layer1 Stack Pivoting detection technique
Improved Layer3 Application Behavior protection
Improved self-protection for MBAE IPC

Kliknij aby rozwinąć...