HitmanPro.ALERT Support and Discussion Thread

Encryption-fly out is back but now it does not disapear after closing IE11 (W7 64 bits/build 177).

 

deugniet,

Do you have IE11 listed under Safe Browsing and covered as a Browser under Applications? The above image shows what looks like it is covered by the Other template, not the Browser template. You should also have a green Safe Browsing tab.

 

Krusty, Browsers AND Office. Btw I did not add IE11 to template Office.

 

Edit: I think I know why this occurs. I use the Firefox-addon Fire IE. (https://addons.mozilla.org/en-US/firefox/addon/fire-ie/?src=search).

 

Update: its not Fire IE. With zero applications running I still see the fly out.

 

Something really odd on your machine, mate.

It might be up to Erik or Mark to solve but in the mean time I would remove the Office mitigations for IE11 and just leave IE to the Browser template.

 

Krusty, after removing the Office mitigations for IE11 the fly out is finally gone.

 

Good to hear! I hope IE11 is still covered by the Browser template?

 

IE11 is still covered by the Browser template

 

IE11 has two binaries: a 32-bit and a 64-bit.
In an older build we had an issue where the 32-bit version was inadvertently placed under Office (due to the .vsd extension that is assigned to iexplore.exe).

Newer builds do not have this issue, but you might have mitigation settings from older builds. Note that an uninstall does not delete the mitigation settings.

Next time you should try Reset Settings to see if this solves the issue.

 

Ok, thanks. Sent you a mail (DEP Firefox/Sandboxie).

 

On boot, I got a Shellcode alert from KeePass preloading, and later another one when I opened Keepass:

 

Thanks for reporting! It is fixed in the upcoming build, published tonight or tomorrow.

 

I'm not interested in testing CryptoGuard Alert. I trust HMP.A will Alert as required. I'm trying to test invoke creation of or maintenance of my CryptoGuard roll back files.
I run AppGuard that requires the c:\windows\cryptoguard Exception...as AppGuard blocks Firefox writing to CryptoGuard folder.
I run SBoxie that requires Direct Access for c:\windows\cryptoguard...as SBoxie isolates Firefox
*Since, I have no notion of when or how CryptoGuard files are created / maintained...&
*Since my CryptoGuard files never change Date modified. I need a way to test if my AppGuard n' SBoxie allowances satisfy HMP.A
Thanks

 

HitmanPro.Alert 3 build 177 Release Candidate running very, very nicely here under Win7 64bit. Doing what it supposed to when it is supposed to without any fuss. Have added in some applications manually and so far no issues in relation to that. Running portable version of all browsers (except IE & Aviator) with no discernible effect on browsing what so ever.

Regards, Baldrick

 

Reporting on latest HitmanPro.Alert 3.0.30.177 RC with Windows 7 64bit OS:

 

HitmanPro.Alert 3 build 178 Release Candidate

Changelog (compared to build 177)

• Improved Shellcode mitigation.
• Improved BadUSB mitigation.

Download
http://test.hitmanpro.com/hmpalert3b178.exe

Please let us know how this version runs on your computer

 

No problems installing build 178. And no alerts with Windows Live Mail 16.4 (W7 64 bits). IE11 only listed under Browsers and not also again under Office. Thanks.

 

Under Browsers I see 3 browsers with build 178. Only 2 with build 177. Intentional? IE11 32- and 64-bits?

 

Yes, that's how it should be.

 

What do I need to know regarding HMP.A playing with RollBack Rx Home Edition.
Anyone running HMP.A + RollBack Home swapping in n' out of encrypted snapshots.

 

No (unexpected) BadUSB messages with 178.