Malwarebytes: "Exploit code executing from Heap memory blocked" - MX5


Recommended Posts

MX v5.3.8.2100
Windows 10 Pro

Hello

Installed Malwarebytes (MBAM) yesterday.

Today, when I open MX5, it is blocked and closed by MBAM around the time the "Last Session" page opens. 

It is necessary to End Task in Task Manager after it is blocked. (Maxthon is consuming "High power".)

The report is pasted below. 

The report appears to be the same one reported on September 5 in the Maxthon Francophone section here https://www.maxthon-fr.com/forum/index.php?/forums/topic/12582-connexion-compte-google-impossible/ (French language).

Quote

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 05/12/2021
Protection Event Time: 08:02
Log File: b7b17a50-55a1-11ec-ad3b-40a8f0b04c4b.json

-Software Information-
Version: 4.4.11.149
Components Version: 1.0.1513
Update Package Version: 1.0.48176
Licence: Trial

-System Information-
OS: Windows 10 (Build 19042.1348)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, 0, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: Maxthon
Protection Layer: Malicious Memory Protection
Protection Technique: Exploit code executing from Heap memory blocked
File Name: 
URL: 

(end)

 

Can I whitelist MX in MBAM or should I be concerned?


 

Link to comment
Share on other sites

On 12/5/2021 at 4:52 PM, TheWhippinpost said:

MX v5.3.8.2100
Windows 10 Pro

Hello

Installed Malwarebytes (MBAM) yesterday.

Today, when I open MX5, it is blocked and closed by MBAM around the time the "Last Session" page opens. 

It is necessary to End Task in Task Manager after it is blocked. (Maxthon is consuming "High power".)

The report is pasted below. 

The report appears to be the same one reported on September 5 in the Maxthon Francophone section here https://www.maxthon-fr.com/forum/index.php?/forums/topic/12582-connexion-compte-google-impossible/ (French language).

 

Can I whitelist MX in MBAM or should I be concerned?


 

Hi TheWhippinpost, you could try to add Maxthon to the whitelist. ?

Link to comment
Share on other sites

Thank you. Didn't work unfortunately.

I whitelisted:

maxthon.exe
mxStart.exe
mxAppLoader.exe

And I tried excluding the whole Maxthon folder.

Another tactic I tried was to instruct MX to open four web-pages using the command-line. It began loading the web-pages in turn but again, around the time it opened the Last Session page it was closed by MBAM.

Link to comment
Share on other sites

I am having the same problem. The suggestion to uninstall Malwarebytes is crazy. You should not not have to uninstall a security program to run a browser. That should be fixed at the Browser level. What I did was whitelist 43.242.73.253 which appears to be a link that provides the Favicons on the Start page. Maxthon should contact Malwarebytes to let them know that the site is safe so they remove it from the blacklisted ones. A lot of people use Malwarebytes and many are likely to uninstall the browser, not Malwarebytes. That program is an essential safety tool.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.