Hi,
A. Comodo 8 can’t work well with Malwarebytes Anti-Exploit. It’s not fully incompatible (at least for me) but Firefox crashes a lot when starting. However, a friend of mine is unable to even start Internet Explorer or Mozilla Firefox when CIS and MBAE are both installed. Check the recorded video for more info.
Malwarebytes Anti-Exploit Free.7z.
Can you reproduce the problem & if so how reliably?:
Yes, but it don’t happen every time when I am starting Firefox. I have a dmp file of the issue. (I accidentally deleted the firefox.exe.dmp but the one I uploaded contains the same information regardless the dumped process is plugin-container.exe).
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
No steps are needed here. Most likely the problem is due to the Comodo bug which doesn’t know how to properly handle chained API hooks.
More information about the new bug can be found here.
[b]New Comodo Bug.[/b] We found a second new bug in Comodo which may cause conflict with MBAE and result in browsers not being able to open correctly. It seems when Comodo injects before MBAE there is no problem, but if MBAE injects before Comodo then Comodo doesn't handle the hooks correctly. A fresh re-install of MBAE solves the problem in most cases.
Any software except CIS/OS involved? If so - name, & exact version:
Malwarebytes Anti-Exploit 1.08.1.1044/5
Any other information, eg your guess at the cause, how you tried to fix it etc:
Uninstalling CIS or MBAE usually resolves the issue.
Exact CIS version & configuration:
Comodo Internet Security 8.2.0.4792 using a custom settings profile based on the proactive profile.
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
All modules are enabled except the Autosandbox. I leaved it enabled coz when disabled Windows Security Center says that D+ is disabled as well but I turned off the rules (so in fact it is disabled).
Have you made any other changes to the default config? (egs here.):
Yes, I did a lot of changes since the default config is weak. I can share my profile if needed.
Have you updated (without uninstall) from CIS 5, 6 or 7?:
No. I did a clean install of Comodo 8 and from there I update the program via the built-in updater.
Have you imported a config from a previous version of CIS:
Yes, but I tweaked it to remove the invalid rules and settings and make it compatible with Comodo 8.
if so, have you tried a standard config - if not please do:
I don’t thinks this is necessary, as the problem seems to be at a deeper level.
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Windows 8.1 x64 Enterprise, admin account with UAC and SmartScreen turned on.
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
Currently, the only software I have installed on my system is Comodo Internet Security, Malwarebytes Anti-Exploit, CryptoPrevent (passive protection) and Bitdefender AntiCryptowall (only for testing purposes - but one note - I added it a few days ago and the issue between CIS and MBAE is occurring from one month ago. It started at the day I installed MBAE).
Regards,
Georgi
