Sandbox surfing not working with MBAE

A. THE BUG/ISSUE (Varies from issue to issue)
Can you reproduce the problem & if so how reliably?:
Yes
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1:Running mbae
2:Running browser in Comodo sandbox
3:Browsing imposible
One or two sentences explaining what actually happened:
Browserr can’t open pages
One or two sentences explaining what you expected to happen:
Expected normal browsing
If a software compatibility problem have you tried the advice to make programs work with CIS?:
No advice yet
Any software except CIS/OS involved? If so - name, & exact version:
Malwarebytes Anti-Exploit v.1.08.1.1189
Any other information, eg your guess at the cause, how you tried to fix it etc:
Only disabled one of involved application

B. YOUR SETUP
Exact CIS version & configuration:
Comodo Firewall v.8.2.0.5005 (firewall config)
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
Firewall=Safe Mode
Auto Sandbox=Enabled
HIPS=Safe mode
Viruscope=Enabled
Have you made any other changes to the default config? (egs here.):
No
Have you updated (without uninstall) from CIS 5, 6 or 7?:
N/A
if so, have you tried a a a clean reinstall - if not please do?:
N/A
Have you imported a config from a previous version of CIS:
No
if so, have you tried a standard config - if not please do:
N/A
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Windows 7 x64, UAC-Default, Acc tipe=Admin, V.Machine=No
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
a=Panda free AV b=MBAE

I have Malwarebytes Anti-Exploit Premium and latest Comodo Firewall and one big problem!

Sandbox browsing not working with mbae!!!

Apparently latest hotfix is not solve this problem!

Do you know if will be fixed soon or not at all?

OS: Win.7 x64
CFW version: 8.2.0.5005

Please use required format.

Thank you.

Uffff…this report format takes time >:(

A. THE BUG/ISSUE (Varies from issue to issue)
Can you reproduce the problem & if so how reliably?:
Yes
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1:Running mbae
2:Running browser in Comodo sandbox
3:Browsing imposible
One or two sentences explaining what actually happened:
Browserr can’t open pages
One or two sentences explaining what you expected to happen:
Expected normal browsing
If a software compatibility problem have you tried the advice to make programs work with CIS?:
No advice yet
Any software except CIS/OS involved? If so - name, & exact version:
Malwarebytes Anti-Exploit v.1.08.1.1189
Any other information, eg your guess at the cause, how you tried to fix it etc:
Only disabled one of involved application

B. YOUR SETUP
Exact CIS version & configuration:
Comodo Firewall v.8.2.0.5005 (firewall config)
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
Firewall=Safe Mode
Auto Sandbox=Enabled
HIPS=Safe mode
Viruscope=Enabled
Have you made any other changes to the default config? (egs here.):
No
Have you updated (without uninstall) from CIS 5, 6 or 7?:
N/A
if so, have you tried a a a clean reinstall - if not please do?:
N/A
Have you imported a config from a previous version of CIS:
No
if so, have you tried a standard config - if not please do:
N/A
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Windows 7 x64, UAC-Default, Acc tipe=Admin, V.Machine=No
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
a=Panda free AV b=MBAE

Can’t replicate. What browser are you using?

Thank you.

I use Chrome browser but I try with IE11 and nothing is better.

You can’t replicate problem?

Install mbae and Comodo Firewall then try to start Chrome or IE11 browser in sandbox, you will see the problem!

Instantly when I stop mbae, problem dissapear!

First your version of MAE is old and needs updated, secondly this is a known issue that the MalwareBytes team is currently working on, here is the newer version of MAE its 1.08.1.1189. This version (1.08.1.1189) has known issues and they are these.
Current MBAE Known Issues:
Protection stopped after upgrading to Windows 10. Some users have reported MBAE not starting up correctly after upgrading to Windows 10.
Current Conflicts with Third-Party Applications:

New Comodo Bug. We found a second new bug in Comodo which may cause conflict with MBAE and result in browsers not being able to open correctly. It seems when Comodo injects before MBAE there is no problem, but if MBAE injects before Comodo then Comodo doesn’t handle the hooks correctly. A fresh re-install of MBAE solves the problem in most cases.

Does that issue sound familiar, it should since its yours andi.cro, they should be working on a fix for those incompatible theird party products. I emailed them to get and answer of when the next version will be out , but haven’t gotten one back yet.
https://support.malwarebytes.org/customer/en/portal/articles/2213296-what-are-the-current-known-issues-with-anti-exploit-?b_id=6440

Thnx Milldog…

This bug is old one and I hope they fix it ASAP!

Can’t replicate. Does IE eventually crash on your system?

Thanks.

[attachment deleted by admin]

IE and Chrome don’t crash but first loading in home page takes for ages…

IE = 80sec. untill Google Home page (after that finding and entering websites is almost normal)

Chrome= 160sec. until Google Home page (after that,finding thru google search and loading websites is normal but loading pages from favorites links again takes forever)

[attachment deleted by admin]

Did you try to exclude browser(s) from shellcode injection detection under HIPS? Any effect?

Thanks.

Yes, no effect :cry:

…EDIT EDIT EDIT…

I do not have this problem any more!!!

You are not inform us about any fix for this issue!?!

Malwarebytes says that this problem must be fix by Comodo…
"New Comodo Bug. We found a second new bug in Comodo which may cause conflict with MBAE and result in browsers not being able to open correctly. It seems when MBAE injects after Comodo there is no problem, but if Comodo injects after MBAE then Comodo doesn’t handle the chained hooks correctly. A fresh re-install of MBAE might temporarily solve the problem (as it sometimes makes MBAE handle the API hooks after Comodo) but the definite bug fix must come from Comodo."

Are you sure? I can reproduce on both Windows 7 and Windows 10 with google chrome and IE browsers taking considerable amount of time to execute and IE ends up self-exiting/crashing.

Yes, I don’t have that problem any more but if you do not make a fix for it then it is bcz of some sistem modification from third party aplication!

Recently I install Cripto Prevent that modifies Group Policy to prevent criptomalware infections. Maybe I have to thanks CriptoPrevent that I do not have this problem any more!!!

Try to install CP and set settings to Max protection and after prompt to reboot, do that…and then try again to run sandboxed browser with mbae on in the background!
Mabye will work to you also ( if it is bcz CP at all ).