Jump to content
Posted 28 June 2012 - 08:51 AM
Posted 24 June 2014 - 11:45 AM
While running Combofix on a Win 7 Pro x64 SP1 host
I came across this error:
Command Line Standard Stream Splitter has stopped working
Checking the application log mtee.3xe kept crashing with 0x00000005 (memory read, access denied)
It was caused by enforcing DEP (Data Execution Prevention) via EMET (Enhanced Mititation Experience Toolkit).
Setting DEP to 'Application Opt Out' allows MTEE, and Combofix to work correctly (the PC must be rebooted after changing this setting, whether via EMET, sysdm.cpl, or via registry).
Attached are the screenshots. The forum won't allow me to upload the evtx event logs, if those would be helpful, let me know.
0 members, 0 guests, 0 anonymous users