HitmanPro.ALERT Support and Discussion Thread

Safety Notification settings are being reset every time HMPA gets upgraded. I have this set to once per logon session because flash flyouts inconsistently keep popping up when I browse a new forum thread (very noticeable on the Wilders Forums) even though the browser application has not been restarted.

 

See here why some browsers start Flash on this forum:
https://www.wilderssecurity.com/thr...n-these-forums-now.373936/page-2#post-2469295

 

Yes, I find the multiple fly outs a little annoying sometimes too. I just change it back to "notify once per logon". Normally the setting sticks - it's only after an upgrade that it reverts.

 

On a family members PC (the only PC I have seen auto-update work on as expected) iTunes failed to sync (large) Apps (like Word, Excel, and PowerPoint) from the PC to a brand new iPhone, until I removed HMPA. This machine has a dual core CPU and I noticed that one core was running iTunes (50%) and the other HMPA (50%), together taking 100% of the available capacity.

 

Desktop W7-x64 US Home Premium, US keyboard, MS Essentials, Spybot S&D 2.4, hp240, hpa187, IE11, FF 38.0.5 (beta)
Desktop W7-x64 NL Home Premium, NL keyboard, MS Essentials, Spywareblaster 5.0, hp240, hpa187, IE11, FF 37.0.2

On both desktops running W7-x64 Home Premium (NL & US), a clean install of hpa187 and/or a 'Reset settings' shows a different protected application list compared to W7-x64 US Professional running on my laptop!

W7-x64 Home Premium shows IE11-x64 and the application 'Irfanview' listed under 'Media'. IMHO not ok!
I manually moved IE11-x64 to the 'Browsers' and removed 'Irfanview'

W7-x64 Professional shows IE11-x64 under 'Browsers' and does NOT show the application 'Irfanview'. IMHO this is ok!



On the desktop running W7-x64 HomePremium US, IE11-32/64bit and FF 38.0.5 actually perform keystroke encryption (proven with the hpm.alert testtool), but no flyouts and mostly no Colored window borders.

On the desktop running W7-x64 HomePremium NL, IE11-32/64bit and FF 37.0.2 do not perform keystroke encryption (proven with the hpm.alert testtool) and show no flyouts.

All together a weird situation.

 

I can confirm that on one MWSWin7Sp1 x64-bit and Up-to-date OS based PC machine, as soon the SurfRight HitmanPro Alert v3.0.41 build 187 is freshly installed, all Microsoft Office 2010 application immediately starts crashing.

The HitmanPro Alert was never installed before on this PC, and I try, just for experiment purposes only, to temporary shut its settings down (for. e.g., I try to disable "Exploit mitigation" and similar) and then try to run Microsoft Word, Excel again..., they are still crashing every single time.

And I am sure 100% that the problem originated via HitmanPro Alert software.
- Just half an hour ago, prior first and initial installation of HitmanPro Alert onto this PC, the Microsoft Word work superbly, never crashes at all.

In addition, I also try to Completely Uninstall the HitmanPro Alert software from that PC, then Microsoft Office immediately starts to work again. But, as soon I install again the HitmanPro Alert software, Microsoft Office applications starts crashing again.

Also, the extra Plug-ins (COM Add-ons) in Microsoft Office is from Adobe Acrobat XI Pro (newest available version), and ABBYY FineReader 12.0.101.382 Pro.
- I completely disabled them in all Office 2010 applications whenever they are support it, then install HitmanPro Alert software again onto this PC, same Microsoft Office applications crashing again.

For example, Microsoft Word crash error via Event Viewer...:

Code:

Faulting application name: WINWORD.EXE, version: 14.0.7147.5000, time stamp: 0x550f3c91
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0xfffffffff9bf7dc8
Faulting process id: 0xe90
Faulting application start time: 0x01d085f860c88ce6
Faulting application path: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Faulting module path: unknown
Report Id: a1de01b7-f1eb-11e4-9cb9-001fd0a3313f

 

Also no issues with Microsoft Office 2007 and build 187 (W7 64 bits). Fly out, green border and encryption.

 

Also no issues with Microsoft Office 2003 and build 187 (W7-x64 Professional). Fly out, green border.

 

@erikloman

Sent you a mail with a dmp.

 

Um, no notion how n' why....Firefox encrypting is back. One minute ago I tested on my homepage search bar. No joy.
Then post at Wilders to find Encrypting is working. Back to homepage and it's working.

 

Build 187 brought my keyboard back to work.

 

Yes, that is what I was pointing out to Erik and Mark. On-top installs should honor the current settings and not change them.

 

No such luck here. Keystroke Encryption is not working in FF but is in IE and Chrome.

 

Ooops, darn thing went by by again....

 

Hello,

I would just like to report that today the encryption flyout/border has started working properly. I see no issues at this time with any of the flyouts or borders but will report back if the issue returns...

 

HPA is generally too buggy, same problem, plus IE11 crashing (module ntdll.dll).

Bought three year subscription, had to remove.

 

Based on the experience of other users, I just booted my dektop and tested Keystroke encryption again:

On the desktop running W7-x64 HomePremium US, IE11-32/64bit and FF 38.0.5 the actually keystroke encryption is still done (validated with the hpm.alert testtool) as reported earlier. So here no change.

However new is that IE11-64bit and FF 38.0.5 beta now do show encryption flyouts.
IE11-32, does still not show encryption flyouts.

 

What AV or security products are you running?

 

I am able to reproduce the absence of the keystroke encryption indicator. I will have a look at the root cause. Thank you all for reporting

 

It's not just the indicator flyout. Test Tool Keyboard logger shows no encrypting in Firefox.

 

Cool, I couldn't find it online either, so I guess I will buy it. I hope Erik and Mark will also post a bit more pics from the RSA conference, and I wonder if they managed to make any good deals over there.

 

Hmmm ...
Has anyone ever tested HMPA3 protection in cases that other HMPA3 indicators do not show?

April 12, I reported that colored borders didn't show with certain applications.
I reported that with certain applications the colored borders didn't show when the application was maximized.

With GOM Player, the colored border didn't show with non-maximized window either.
Since then, GOM Player seems to have been withdrawn as an application that has HMPA protection by default. I haven't added it to HMPA protected applications manually, so I don't know whether GOM Player's colored border situation has changed or not.

More importantly,
April 12, I also reported that colored borders didn't show with IE9 and IE11 InPrivate Browsing, not when maximized, and not with non-maximized InPrivate Browsing either.
Since then, I disabled HMPA colored window borders.
Right now, I re-enabled HMPA colored window borders for testing with IE9 and IE11 InPrivate Browsing.
I notice that colored borders still do not show with IE9 and IE11 InPrivate Browsing, not when maximized, and not with non-maximized InPrivate Browsing either.
What does this mean?
Is it just the colored borders that don't show?
Or is IE9 and IE11 InPrivate Browsing not protected by HMPA, maybe??
Has anyone tested that?
Has this specific issue been looked into by SurfRight, yet?

Edit:
Changed "InPrivate navigation" to "InPrivate Browsing", which is the correct term in English.
For some weird reason it's called InPrivate navigation in Dutch and in French.

 

@ erikloman and markloman

Do you think that HMPA would be able to detect the malware and simulators used in this test?

https://www.wilderssecurity.com/thre...ecurity-certification-project-q1-2015.375606/

 

Is In Private navigation the same as In Private Browsing