Malwarebytes Flagging Roon 2.0 b1272 for Exploit.HeapMemoryCodeExecution

Support
1

Roon Core Machine

Got this crash right after updating to b1272 and it closed Roon entirely.

Restarted, and can repro the crash and MalwareByttes reporting when clicking on Community or Roon Store. Done this 5x now.

I have Roon.exe flagged as an exception program elsewhere, but this appears to be flagged as a malicious memory activity, outside of the “leave Roon.exe alone” rule.

Malwarebytes

-Log Details-
Protection Event Date: 5/8/23
Protection Event Time: 3:01 PM
Log File: d7a11918-edeb-11ed-bcc9-a4bb6d50fc81.json

-Software Information-
Version: 4.5.27.262
Components Version: 1.0.1991
Update Package Version: 1.0.69225
License: Premium

-System Information-
OS: Windows 11 (Build 22621.1555)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.HeapMemoryCodeExecution, , Blocked, 0, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: Roon
Protection Layer: Malicious Memory Protection
Protection Technique: Exploit code executing from Heap memory blocked
File Name:
URL:

----- Advanced export -----

Malwarebytes

-Log Details-
Protection Event Date: 5/8/23
Protection Event Time: 3:01 PM
Log File: d7a11918-edeb-11ed-bcc9-a4bb6d50fc81.json

-Software Information-
Version: 4.5.27.262
Components Version: 1.0.1991
Update Package Version: 1.0.69225
License: Premium

-System Information-
OS: Windows 11 (Build 22621.1555)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.HeapMemoryCodeExecution, , Blocked, 0, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: Roon
Protection Layer: Malicious Memory Protection
Protection Technique: Exploit code executing from Heap memory blocked
File Name:
URL:

(end)

(end)

Networking Gear & Setup Details

Connected Audio Devices

Number of Tracks in Library

Description of Issue

2

Hey @Frans,

Thanks for taking the time to write in! Sorry for the delay in responding to your issue.

Are you able test out other hotlinks in Roon to see if the issue reproduces? A good place to test this would be in Roon Settings>About>Learn more.

If you visit these links on the browser alone, are you able to reach them? If you temporarily disable MalwareByttes, does the issue still occur?

I’ll be on standby for your reply. :+1:

4

This topic was automatically closed 45 days after the last reply. New replies are no longer allowed.