Page Index Toggle Pages: 1 Send TopicPrint
Normal Topic PhonerLite 2.11 start prevented by EMET (Read 5038 times)
robocop
YaBB Newbies
*
Offline


Phoner is great!

Posts: 8
Joined: 19. Jun 2012
PhonerLite 2.11 start prevented by EMET
21. Sep 2013 at 17:57
Print Post  
After using PhonerLite 2.10 and previous versions without any problems, I just downloaded and tried for the first time the new version 2.11. But the Microsoft EMET 4.0 security tool (http://blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx, requires .NET 4.0 Full) does not allow its start with the "SimExecFlow" protection enabled for PhonerLite.

I use the portable PhonerLite.zip variant.

The "SimExecFlow" protection can of course be disabled specifically for PhonerLite, but that would be a bad practice. Previous PhonerLite versions ran without problems with all EMET protections enabled for them. No EMET configuration changes were made for the new PhonerLite version 2.11.

WinXP Home SP3, 32bit, German

Windows error log file "2d33_appcompat.txt" attached.


--------------------------------------------
Here is the EMET output into the application event log:

Ereignistyp:      Fehler
Ereignisquelle:      EMET
Ereigniskategorie:      Keine
Ereigniskennung:      2
Datum:            21.09.2013
Zeit:            17:12:11
Benutzer:            Nicht zutreffend
Computer:      [removed]
Beschreibung:
Application Name: D:\Backup\Programm-Backup\PhonerLite\PhonerLite\PhonerLite.exe
Execution flow simulation check failed:
  PID          : 0x714/1812
  TID          : 6EC
  CodeAddress  : 004E381A
  CodeStackPtr : 13FF24
  CalledAddress: 7C801AD4
  API name     : kernel32.VirtualProtect
  StackPtr     : 0013FF08
  FramePtr     : 13FF38

Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.


--------------------------------------------------
EMET system configuration (from the application event log):

Ereignistyp:      Informationen
Ereignisquelle:      EMET
Ereigniskategorie:      Keine
Ereigniskennung:      0
Datum:            21.09.2013
Zeit:            16:50:14
Benutzer:            Nicht zutreffend
Computer:      [removed]
Beschreibung:
EMET Agent started, logging events

EMET configuration for System mitigations (Registry) is:
<ConfigSysmitREG>
DEP: Application Opt In
SEHOP: Unavailable
ASLR: Unavailable
Pinning: Enabled
</ConfigSysmitREG>

EMET configuration for System mitigations (GPO) is:
<ConfigSysmitGPO>
</ConfigSysmitGPO>

Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.


------------------------------------------------
EMET PhonerLite configuration (from the application event log):

PhonerLite.exe *  DEP SEHOP NullPage HeapSpray EAF BottomUpASLR LoadLib MemProt Caller SimExecFlow StackPivot
  

2d33_appcompat.txt ( 10 KB | Downloads )
Back to top
 
IP Logged
 
robocop
YaBB Newbies
*
Offline


Phoner is great!

Posts: 8
Joined: 19. Jun 2012
Re: PhonerLite 2.11 start prevented by EMET
Reply #1 - 21. Sep 2013 at 18:03
Print Post  
P.S.: I went back to the version 2.10 for the time being.
  
Back to top
 
IP Logged
 
Phoner Admin
YaBB Administrator
*****
Offline



Posts: 11412
Location: Germany
Joined: 12. Oct 2003
Gender: Male
Re: PhonerLite 2.11 start prevented by EMET
Reply #2 - 23. Sep 2013 at 08:11
Print Post  
I can't see a real cause, why this tools tells something about a problem. Sorry.
  
Back to top
WWW  
IP Logged
 
Page Index Toggle Pages: 1
Send TopicPrint