EMET or Malwarebytes Anti exploit?

Page 1 of 4 123 ... LastLast

  1. Posts : 2,979
    Windows 11
       #1

    EMET or Malwarebytes Anti exploit?


    Just wondering what people are using for Windows 10? Apparently EMET can be easily exploited in Windows 10 and MB Anti exploit is recommended over it. Any opinions on this? Does the premium version of Anti exploit allow you to secure 3rd party apps as EMET is able to?
      My Computer


  2. Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       #2

    Hi:

    I cannot comment on EMET, as I have never used it. I recall seeing here some time ago a post mentioning that even MS had deprecated support (or at least recommendations for it).

    As for MBAE, the Free version shields many common browsers, and certain plug-ins, like Java.
    MBAE Premium by default also shields PDF readers, Office-type application, Media Players. It can be configured via custom shields to shield nearly any internet-facing application.
    Licenses are subscription-based and for 1 system each, with a discount for multiple licenses purchased at the same transaction.
    I run MBAE Premium alongside MBAM Premium and my AV on all of my systems.
    It is unobtrusive, requires ~no user interaction once configured and consumes scant resources.

    I have no personal experience with it, but HitmanProAlert (HMPA) is another, paid, anti-exploit product.

    HTH,
    MM
      My Computer


  3. Posts : 2,979
    Windows 11
    Thread Starter
       #3

    MoxieMomma said:
    Hi:

    I cannot comment on EMET, as I have never used it. I recall seeing here some time ago a post mentioning that even MS had deprecated support (or at least recommendations for it).

    As for MBAE, the Free version shields many common browsers, and certain plug-ins, like Java.
    MBAE Premium by default also shields PDF readers, Office-type application, Media Players. It can be configured via custom shields to shield nearly any internet-facing application.
    Licenses are subscription-based and for 1 system each, with a discount for multiple licenses purchased at the same transaction.
    I run MBAE Premium alongside MBAM Premium and my AV on all of my systems.
    It is unobtrusive, requires ~no user interaction once configured and consumes scant resources.

    I have no personal experience with it, but HitmanProAlert (HMPA) is another, paid, anti-exploit product.

    HTH,
    MM
    Cheers, I will look into MBAE premium once I get a more definitive answer on what the story is with EMET.

    I understand you can configure any app in EMET to be secured but I suppose the Internet facing apps are going to most at risk...
      My Computer


  4. Posts : 258
    Windows 10
       #4

    Kol12 said:
    Just wondering what people are using for Windows 10? Apparently EMET can be easily exploited in Windows 10 and MB Anti exploit is recommended over it. Any opinions on this? Does the premium version of Anti exploit allow you to secure 3rd party apps as EMET is able to?
    I'm using Windows Defender and Malwarebytes Anti Malware Pro on my beast gaming rig, and any software can be easily exploited in Windows 10 not just security software. The simple answer is try it yourself and see which one you like it.
      My Computer


  5. Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       #5

    Here is the pinned topic:
    Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Windows 10 Forums

    Here is a post by @Brink from Februrary, about EMET's vulnerability:
    Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Page 3 - Windows 10 Forums

    A quick Google search turns up many similar posts at a range of security fora, all dating back to February 2016.

    Cheers,
    MM
      My Computer


  6. Posts : 353
    Multi-Boot W7_Pro_x64 W8.1_Pro_x64 W10_Pro_x64
       #6

    Is EMET deprecated, can you post links with that info ?
    MS published kb3185278 for a W7 EMET fix yesterday:
    https://support.microsoft.com/en-us/kb/3185278

    For me, keeping MBAE (free) updated is more of a pita than anything else.
    For systems/people i support, i prefer EMET vs. MBAE.
      My Computer


  7. Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       #7

    I stand corrected.
    Deprecated was not the proper wording.

    But, as pointed out in the previous replies, and in the article for which @Brink provided the link in the EMET pinned topic, it is acknowledged to be *vulnerable*.
    The report was picked up and posted on many security and general computer fora around the time of the original report in February.
    MS's candid admission about EMET's vulnerability does seem to be noteworthy.

    Of course, all software is "vulnerable" on some level or another.

    Cheers,
    MM
      My Computer


  8. Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       #8

    DavidE said:

    For me, keeping MBAE (free) updated is more of a pita than anything else.
    I'm not sure what you mean by that.

    MBAE does not work through definitions or databases.
    So there is nothing to keep "updated", except for the program itself.
    The program will auto-update through it's internal auto-updater from time to time, when a new build is released, if the user enables the auto-updater.
    And the Free version protects only certain browsers and plug-ins, so there is nothing to set-up or configure, as there would be with any of the paid anti-exploit products or EMET. (IOW EMET and all of the paid anti-exploit applications require some user interaction to configure custom settings, at least initially.)
    Other than that, both the Free and Premium versions run quite silently in the background, unless/until an exploit is detected and blocked. In that case the program is doing its job.

    So, I am puzzled by your report of trouble updating MBAE Free.
    Perhaps you can explain in a bit more detail?

    Thanks,
    MM
      My Computer


  9. Posts : 2,979
    Windows 11
    Thread Starter
       #9

    My first source of information regarding the EMET vulnerability was from hardenwindows10forsecurity.com where he say's and I quote:

    "This guide used to recommend EMET 5.2 for other versions of Windows, but MS has pronounced that it is not compatible with Windows 10. EMET 5.5 has been released. However, the new version requires the Secondary Logon service active. And by having access to Secondary Logon service, attackers can use the runas command line tool to invoke administrative rights."
      My Computer


  10. Posts : 353
    Multi-Boot W7_Pro_x64 W8.1_Pro_x64 W10_Pro_x64
       #10

    MoxieMomma said:
    I'm not sure what you mean by that.

    So there is nothing to keep "updated", except for the program itself.
    The program will auto-update through it's internal auto-updater from time to time, when a new build is released, if the user enables the auto-updater.
    The auto-update program updates are the problem.
    For me for, in the free version, i don't see a choice to be notified of a new update and have any control.
    If I'm logged in as a Limited account, MBAE wants to update the program.
    I can't/won't do that without doing a system image backup first, and logging in as an Admin before updating ANY Security program.
    I think i tried updating the program logged in as Limited a long time ago, and that never worked
    Well, when i decline the "update now" for the MBAE program update, it takes at least a day to get offered the update again.
    And by then I'm logged in as a Limiter User again, I'm not going to stay logged in as an Admin, just for an MBAE update.
    Yea, I've downloaded the latest MBAE version for a pgm update as admin, and using that is another experience
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 19:25.
Find Us




Windows 10 Forums