locked
EMET 52 - Encountered irrecoverable error RRS feed

  • Question

  • Haven't had much success getting replies. I am seeing a fairly significant number of EMET service crashes and am not sure if this is caused by software instability, my specific configuration, conflict with some other security software that I am running or if there is malware that is able to kill EMET as part of the attack.  Running EMET on thousands of machines so failure rate is relatively low but still see a couple of these per day.
    Thursday, September 3, 2015 3:42 PM

All replies

  • Ran my EMET numbers for the first two weeks of September.  Had 130 EMET events and 20 percent of those were either EMET service or EMET agent crashes.  There were at least a couple that trigger immediately before or after another EMET mitigation.  Would be useful to know if this is an oddity on my side or if others see similar issues.  Am still running 5.1 although planning to move to 5.2.  That will reset my clock and data for the past year so will have to hold off on my gripes until I have enough new data or the problems go away.
    Tuesday, September 15, 2015 11:25 PM