EMET 5.5, Avira and BitLocker

@Borg 386: I use Avira free and it works fine with Windows 10. Instead of EMET I use Malwarebytes Anti Exploit.

Borg 386 said:

I posted an article recently that MS feels Win 10 is secure enough without EMET & they may be backing away from supporting it for 10. That could be the reason it's not installing correctly, among other causes.

But is that actually true? I mean, is there any way I can see evidence of Windows 10's built-in security replacing EMET?

Here's how I deal with security:

• I set up a strong password for the first account created, named "Admin";
• UAC to Max;
• Then I create a non-Admin account and use that daily, and so whenever a change to the OS takes place I must type the admin password;
• MBAM Premium;
• Avira Free for Primary resident scanning;
• COMODO Internet Security, with HIPS on Safe Mode, custom Firewall rules, Sandboxing for most programs;
• VeraCrypt for offline security and privacy;

Borg 386 said:

Anytime you run another AV, Defender should be automatically disabled. Perhaps Avira doesn't "play well" with 10 yet. Or Win doesn't like the idea of another AV on their OS. Wait & see if Defender come back on down the road. If not, then Avira is doing it's job. If Defender comes back on & does something like disable Avira, it might be wise to go to the Avira support page & see if other people are having the same issue.

I see. Thanks.

But how long should the wait be? I have now idea what MS mean by "a while".

prikker said:

@Borg 386: I use Avira free and it works fine with Windows 10. Instead of EMET I use Malwarebytes Anti Exploit.

Thanks.

Borg 386 said:

Thank you for the input, that shows that Avira should run on 10 with no probs. However people have different configs, so it's hard to say why Defender is complaining on Amarildos system.

Actually, it's not :) I did complain right when Avira was installed, it complained only about being disabled I think.

Borg 386 said:

Here's the article I saw or similar to it & posted.

Microsoft's malware mitigator refreshed, but even Redmond says it's no longer needed • The Register

It does say it supports 10, so the problem of it not going in lies elsewhere. You may have run into a block since your running Comodo. I've dealt with it before, I'm am running it on 2 of the OS's I have & sometimes it makes installation of deep level software a bit hard. You have to jump through a lot of hoops & allow a lot of settings. It might be a good idea to completely disable Comodo while you install EMET.

Hi,

After a few weeks of trying, re-installing the OS and installing only EMET, I can only enable DEP via EMET if Bitlocker is set up. This is ridiculous, I use TrueCrypt for encryption. I even bought a Windows 7 Ultimate license to see if the problem was that my Windows 7 Home Basic didn't have BitLocker, but now it's clear that I must setup Bitlocker in order to do what I want.

Would anyone know a way of fixing this? I really don't want to get in contact with Microsoft, otherwise they'd sue me for namecalling.

There must be a way of trick Windows/EMET into thinking I have Windows protected by BitLocker.

SOLVED:

What solved to me:

• Open CMD as Administrator.
• If you want DEP to always on, paste the following command (without quotes): "bcdedit.exe /set {current} nx AlwaysOn"
• If you want DEP to Application Opt Out, paste the following command (without quotes): "bcdedit.exe /set {current} nx OptOut"
• Then reboot.

If you open EMET now, you'll see that the selected option is correct to what you specified on CMD before rebooting.

If you want to change DEP settings again, do the same thing via CMD, then reboot. Don't try to change it via EMET GUI otherwise you'll still get that error.


Hope this helps :)