HitmanPro.ALERT Support and Discussion Thread

Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.

  1. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,556
    If you already know that website isn't malicious, then you can disable "malicious website protection" when you enter a website, and later enable it when you leave.
     
  2. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,841
    Location:
    the Netherlands
    I'm sorry that I can't help you.
    I hope that Erik and Mark will come up with some fixes.

    I notice that quite some reported issues are still pending (or even quite a lot, one might say).
    I hope that Erik and Mark have listed all reported issues and I hope they're working on an update that can fix most, if not all, reported issues still pending.

    I listed the issues that I reported and that are still pending (that is including the most recently reported issue).
    Colored borders that don't show with certain applications,
    double flyouts (triple, even) with opening LibreOffice applications,
    print and print preferences delay when printing from Vista x86 IE9,
    GOM Player no longer listed as one of the protected applications,
    unable to download Realtek HD Audio 2.76 with Vista x86 IE9 and HMPA3.

    I won't go as far as to list all issues that have been reported by others and that are still pending.
    But if anyone thinks it could be helpful to list all pending issues, please do, I suppose.
     
  3. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    er' what
     
  4. maniac2003

    maniac2003 Registered Member

    Joined:
    Apr 12, 2007
    Posts:
    120
    Location:
    Netherlands
    Looks fixed for me. Don't know how but it works now.
     
  5. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,556
    There appears to be an issue for that user between HitmanPro alert and Malwarebytes Premium's Malicious Website Protection.

    I still don't know the cause of it. I tried entering the following website with both on.
    http://iptest.malwarebytes.org/
    But I get a connection error "ERR_CONNECTION_REFUSED"

    I tried disabling the Malicious Website protection, and I could access it fine.

    Then tried to disable mitigation and other protections of HitmanPro alert while keeping Malicious Website Protection on, and I still get the connection error.

    I'm suspecting I might need to reboot my computer to completely disable HitmanPro Alert perhaps someone here can confirm this. If not, it appears the problem has to do with Malwarebytes only.

    Easiest solution seems to be to disable Malwarebytes's Malicious Website Protection if you are certain the website is completely safe.
     
  6. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    No one can know a website is completely safe from one blink to the next....
     
    Last edited: Apr 21, 2015
  7. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    1,131
    Location:
    Baden Germany
    Certainly I could and did, during the last weeks.
    But I will not, for the rest of my life.

    If there is no fix, I've done with HMP.A
     
  8. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    1,131
    Location:
    Baden Germany
    No!
    Easiest solution is to uninstall HMP.A, as MBAM works fine then.
     
  9. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    It has happened again!

    I've just had both of my Windows 7 64-Bit machines having HMP.A constantly using around 30% CPU. Restarting resolved it but this has happened once before with no explanation. o_O
     
  10. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Is it the service (runs as STSTEM) or the trayicon (runs as USER) that is producing the CPU load?

    Can you check the Windows Event Log to see if the service was restarted?

    Tip for next time, in TaskManager, right-click the hmpalert.exe process with the load and generate a dump, and send it to me.
     
  11. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    I will try to reproduce.

    EDIT: I am able to reproduce the issue. Page comes up blank! There seems to be a conflict with MWAC.sys. This only happens on Windows 8. Not on Windows 7 or older.
     
    Last edited: Apr 22, 2015
  12. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    The Tray icon became unresponsive but hovering over it showed the current version, right clicking it did nothing.

    There isn't much of interest in Event Viewer, but here is the latest entry concerning Alert.

    Code:
    Log Name:      Application
    Source:        HitmanPro.Alert
    Date:          22/04/2015 3:53:40 PM
    Event ID:      211
    Task Category: Installer
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      David-HP
    Description:
    Application is up-to-date. Next check in 8 hours.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="HitmanPro.Alert" />
        <EventID Qualifiers="0">211</EventID>
        <Level>4</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-04-22T05:53:40.000000000Z" />
        <EventRecordID>11562</EventRecordID>
        <Channel>Application</Channel>
        <Computer>David-HP</Computer>
        <Security />
      </System>
      <EventData>
        <Data>8 hours</Data>
      </EventData>
    </Event>
    OK, next time I see this I will create the dump. It is really odd that the only time I've seen this it affected both of my machines at the same time.

    Edit: It was hmpalert.exe.
     
  13. heikwith

    heikwith Registered Member

    Joined:
    Jul 29, 2002
    Posts:
    91
    I am a Windows Vista x86 user.
    I have download problems when virusscanner Avast is active in Windows 8.1 32bit.
    But there is HMPA3 also active.
    Probably the same problem.
    Give me a direct link to the Realtek High Definition Audio 2.76 download and I will try here
     
  14. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    1,242
    Logboeknaam: Application
    Bron: Application Error
    Datum: 22-4-2015 13:22:03
    Gebeurtenis-id:1000
    Taakcategorie: (100)
    Niveau: Fout
    Trefwoorden: Klassiek
    Gebruiker: n.v.t.
    Computer: ****
    Beschrijving:
    Naam van toepassing met fout: hmpalert.exe, versie: 3.0.38.183, tijdstempel: 0x552fb8de
    Naam van module met fout: hmpalert.exe, versie: 3.0.38.183, tijdstempel: 0x552fb8de
    Uitzonderingscode: 0xc0000417
    Foutoffset: 0x001f11b8
    Id van proces met fout: 0x310
    Starttijd van toepassing met fout: 0x01d07cc1228b6104
    Pad naar toepassing met fout: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
    Pad naar module met fout: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
    Rapport-id: cc50a6c0-e8e1-11e4-9f70-001f16aa0c13
    Gebeurtenis-XML:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-22T11:22:03.000000000Z" />
    <EventRecordID>167338</EventRecordID>
    <Channel>Application</Channel>
    <Computer>****</Computer>
    <Security />
    </System>
    <EventData>
    <Data>hmpalert.exe</Data>
    <Data>3.0.38.183</Data>
    <Data>552fb8de</Data>
    <Data>hmpalert.exe</Data>
    <Data>3.0.38.183</Data>
    <Data>552fb8de</Data>
    <Data>c0000417</Data>
    <Data>001f11b8</Data>
    <Data>310</Data>
    <Data>01d07cc1228b6104</Data>
    <Data>C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe</Data>
    <Data>C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe</Data>
    <Data>cc50a6c0-e8e1-11e4-9f70-001f16aa0c13</Data>
    </EventData>
    </Event>

    Logboeknaam: Application
    Bron: Windows Error Reporting
    Datum: 22-4-2015 13:22:24
    Gebeurtenis-id:1001
    Taakcategorie: Geen
    Niveau: Informatie
    Trefwoorden: Klassiek
    Gebruiker: n.v.t.
    Computer: ****
    Beschrijving:
    Foutbucket , type 0
    Naam van gebeurtenis: BEX
    Antwoord: Niet beschikbaar
    Id van CAB-bestand: 0

    Handtekening van probleem:
    P1: hmpalert.exe
    P2: 3.0.38.183
    P3: 552fb8de
    P4: hmpalert.exe
    P5: 3.0.38.183
    P6: 552fb8de
    P7: 001f11b8
    P8: c0000417
    P9: 00000000
    P10:
     
  15. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,841
    Location:
    the Netherlands
    I'm sorry, there is no direct download link available at the Realtek site.
    That is why I offered the http://www.realtek.com.tw/downloads/ page.
    At that page, choose "High Definition Audio Codecs (Software)".
    At the next page, tick the checkbox for "I accept to the above" and click "Next".
    Finally, at the next page, you can choose your download, like "32bits Vista, Windows7, Windows8, Windows8.1 Driver only (Executable file)" via download site US2 (USA East Coast), for instance, or any of the other options.

    Could you try your Windows 8.1 + HMPA3 system, and also your Windows Vista x86 system?
    Is your Windows Vista x86 system without HMPA3?

    As I wrote earlier,
    Thanks very much.
     
  16. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Most of our employees are at RSA Conference. It might take a while (up to a week) before these issues can be looked into.

    EDIT: I can confirm the Media Player colored border issue on maximized window issue.
     
    Last edited: Apr 22, 2015
  17. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    I can download the various files the sites on Windows 8.1 + HMPA3. The US1 site is slow, but ultimately it begins to download. All other links download also just fine. I do not have Vista x86 at hand to test that. Anyone else in this thread can try?
     
  18. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,738
    Still no reply to the Corel WinDVD Pro Blu-Ray decoding bug? Although it's technically correct, newbies would be unnecessarily scared IMO.

    Also, I've had some FP's with some installers such as XBCD. Not sure if still applies, but there is no way to disable HMP.A for them without reinstalling it.
     
  19. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,841
    Location:
    the Netherlands
    That is OK, of course.
    But as I said, I notice that quite some reported issues are still pending, not only the ones that I reported.
    That's why I said that I hope that you have listed all reported issues. It would be a real pity if issues were reported but weren't noticed.
    But if all reported issues are listed, of course we can wait a little more, till you find the time to look into those issues.
    Thanks very much.
     
  20. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,841
    Location:
    the Netherlands
    Thanks very much for testing with Windows 8.1 + HMPA3.
    Regarding Vista x86, I hope heikwith can try with Vista x86 IE9, as mentioned here and here.
     
  21. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    HitmanPro.Alert 3 Build 184 BETA

    This build adds a new feature where the user can add applications that are to be excluded. For example, you can add GTAV or other games that do not like injections.

    Exclusion.png

    Changelog
    • Added application exclusion to "Your applications" panel (scroll to the far right)
    • Fixed a random crash in the service (may be cause of keyboard encryption failure)
    • Several minor improvements
    Download
    http://test.hitmanpro.com/hmpalert3b184.exe

    Please let me know how this version runs on your computer :thumb:
     
  22. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    1,242
    Nice feature: Added application exclusion to "Your applications" panel.

    Lets see if I can exclude Sandboxie on Vista 32 bits and get a sandboxed browser.
     
  23. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    1,242
    Added several sandboxie .exe-files but it did not work. Never mind, not that important.

    No problems installing/updating build 184 (Vista 32 bits/W7 64 bits).
     
  24. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,219
    Location:
    USA
    I wonder if the exclusions take effect immediately or if a reboot is required; perhaps the latter since HMPA was injected before the exclusion was made?
     
    Last edited: Apr 22, 2015
  25. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    You just have to restart the excluded application. No reboot needed.

    Keep in mind to only exclude applications that do not start when Alert is installed.

    So far only a few games like GTAV and a handful of legacy apps that want either 1GB of continous memory (RapidMiner 32-bit) or work with large ranges of fixed addresses (some MinGW apps).
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.