Windows 10: EMET or Malwarebytes Anti exploit?

Just wondering what people are using for Windows 10? Apparently EMET can be easily exploited in Windows 10 and MB Anti exploit is recommended over it. Any opinions on this? Does the premium version of Anti exploit allow you to secure 3rd party apps as EMET is able to?

:)

 

Does EMET perform well ?

When compared to Malwarebytes Anti-Exploit and HitmanPro.Alert, EMET has less features and offers not so great protection. I just wanna know,
Do I really need to have another anti-exploit programme leaving EMET ?

 

windows 10 anti-virus / malware protection

I've recently installed windows 10.

Any advice on additional security to run alongside windows defender?

My own googling seems to all come back to Malwarebytes Anti-Malware / Malwarebytes Anti-Exploit / Microsoft EMET. Do I need all 3 of these?

Any help much appreciated

 

Hi:

I cannot comment on EMET, as I have never used it. I recall seeing here some time ago a post mentioning that even MS had deprecated support (or at least recommendations for it).

As for MBAE, the Free version shields many common browsers, and certain plug-ins, like Java.
MBAE Premium by default also shields PDF readers, Office-type application, Media Players. It can be configured via custom shields to shield nearly any internet-facing application.
Licenses are subscription-based and for 1 system each, with a discount for multiple licenses purchased at the same transaction.
I run MBAE Premium alongside MBAM Premium and my AV on all of my systems.
It is unobtrusive, requires ~no user interaction once configured and consumes scant resources.

I have no personal experience with it, but HitmanProAlert (HMPA) is another, paid, anti-exploit product.

HTH,
MM

 

Cheers, I will look into MBAE premium once I get a more definitive answer on what the story is with EMET.

I understand you can configure any app in EMET to be secured but I suppose the Internet facing apps are going to most at risk...

 

I'm using Windows Defender and Malwarebytes Anti Malware Pro on my beast gaming rig, and any software can be easily exploited in Windows 10 not just security software. The simple answer is try it yourself and see which one you like it.

 

Here is the pinned topic:
Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Windows 10 Forums

Here is a post by @Brink from Februrary, about EMET's vulnerability:
Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Page 3 - Windows 10 Forums

A quick Google search turns up many similar posts at a range of security fora, all dating back to February 2016.

Cheers,
MM

 

Is EMET deprecated, can you post links with that info ?
MS published kb3185278 for a W7 EMET fix yesterday:
https://support.microsoft.com/en-us/kb/3185278

For me, keeping MBAE (free) updated is more of a pita than anything else.
For systems/people i support, i prefer EMET vs. MBAE.

 

I stand corrected.
Deprecated was not the proper wording.

But, as pointed out in the previous replies, and in the article for which @Brink provided the link in the EMET pinned topic, it is acknowledged to be *vulnerable*.
The report was picked up and posted on many security and general computer fora around the time of the original report in February.
MS's candid admission about EMET's vulnerability does seem to be noteworthy.

Of course, all software is "vulnerable" on some level or another.

Cheers,
MM

 

I'm not sure what you mean by that.*Sad

MBAE does not work through definitions or databases.
So there is nothing to keep "updated", except for the program itself.
The program will auto-update through it's internal auto-updater from time to time, when a new build is released, if the user enables the auto-updater.
And the Free version protects only certain browsers and plug-ins, so there is nothing to set-up or configure, as there would be with any of the paid anti-exploit products or EMET. (IOW EMET and all of the paid anti-exploit applications require some user interaction to configure custom settings, at least initially.)
Other than that, both the Free and Premium versions run quite silently in the background, unless/until an exploit is detected and blocked. In that case the program is doing its job.

So, I am puzzled by your report of trouble updating MBAE Free.
Perhaps you can explain in a bit more detail?

Thanks,
MM

 

My first source of information regarding the EMET vulnerability was from hardenwindows10forsecurity.com where he say's and I quote:

"This guide used to recommend EMET 5.2 for other versions of Windows, but MS has pronounced that it is not compatible with Windows 10. EMET 5.5 has been released. However, the new version requires the Secondary Logon service active. And by having access to Secondary Logon service, attackers can use the runas command line tool to invoke administrative rights."

 

The auto-update program updates are the problem.
For me for, in the free version, i don't see a choice to be notified of a new update and have any control.
If I'm logged in as a Limited account, MBAE wants to update the program.
I can't/won't do that without doing a system image backup first, and logging in as an Admin before updating ANY Security program.
I think i tried updating the program logged in as Limited a long time ago, and that never worked *Sad
Well, when i decline the "update now" for the MBAE program update, it takes at least a day to get offered the update again.
And by then I'm logged in as a Limiter User again, I'm not going to stay logged in as an Admin, just for an MBAE update.
Yea, I've downloaded the latest MBAE version for a pgm update as admin, and using that is another experience *Zip

 

Can you post a link, i'd like to read about that.
I'm not a security expert, just a cautious user. *Tongue

 

DavidE,

You can turn off the auto update in MBAE if that will help.





Jim *Cool

 

The issue i see with that is if it is turned off, there is no notification of a program update available.
I would like to get a prompt when a new program update is available, and control if/when it is updated.