HitmanPro.ALERT Support and Discussion Thread

Not exactly. They use the calculator as a proof of concept for most of their exploits but there is no specific vulnerability protection of the calculator. Check out the exploit tester program.

 

imho it doesn't make sense to enable HMP.Alert 3 on as much programs as possible. Exploits will normally only targeting browsers, plugins, PDF readers, office applications and media players.

There is one exception:
If someone is able to burn a TrueType Font parsing 0day ( like CVE-2014-4148 ) then no single mitigation tool / AV program will be able to stop it, just because it will dive instantly into the kernel (instant SYSTEM rights)

 

hi, thank you great product, working well thankfully

 

Exactly ~ that's why I went with v2.6.5 and yet ran into problems. Install of hmp.alert or run SBoxie broke SBoxie.
Had to uninstall hmp.alert and clean install SBoxie to repair SBoxie
If I add Full Access does this fix my problem so as not to break SBoxie

 

I think you should PM Erik if you want the key for HMP.A

 

On Windows 7 and 8 I cannot get the green border to show when my browser GUI (FF) is maximized. It only appears if the window is not maximized. Anyone else noticing this?

It's not a problem on XP.

 

Go with mousepointer to the top of the (maximized) screen. The border appears...

 

That's just the point - mousing on the upper edge doesn't make it appear..

 

I tried Version 3 and found it was slowing down my command prompt considerably. Switched back to Vesion 2 and CMD is fine.

 

Does the border show if you type in a browser search field?

 

Do you use Sandboxie or Norton Internet Security? I use both and no green border with IE11 sandboxed, with FF 34.0.5 no problem (W7 64 bits). Known issue afaik.

 

What do you mean by slow down? Command Prompt isnt mitigated so I wonder what is going on.

 

I havent experienced this with just Alert installed. I will have to replicate your setup to see if we can reproduce and find a possible cause. You could try disabling MBAE to see if that has effect.

 

Are you running Keyscrambler at the same time?

 

Yes, typing one key when the GUI is maximized and has focus is enough for the encryption display to appear with the green border. Mousing on the top edge doesn't work though. Nothing at all appears if Keyscrambler is active.

 

No, Keyscrambler is disabled. When Keyscrambler is active, the HMPA encryption display is suppressed. Mousing on the top edge works for a non-maximized GUI even if Keyscrambler is active. IE maximized doesn't show this problem, so it looks like it's FF specific.

BTW, does HMPA encryption work at the same level as Keyscrambler?

In the end, I will be using only one encryption solution to avoid possible conflicts.

 

No. I don't have any other security products active. In my case, IE doesn't have a problem showing the boarder when maximized - only Firefox and Thunderbird.

 

When I run a .bat file, the output in the command window is noticeably slower when Alert is active - with Alert disabled the slowdown disappears.

I have not yet tried v2 again to compare.

 

What specific mitigation did you disable to solve the slowdown? Or did you complete uninstall?

 

Thank you Erik.

 

@ erikloman

Can you give some more info about the "Network Lockdown" feature? For what behavior is it looking?

 

I get a bid BSOD on restart with Alert on XP SP 2 with Comodo CIS and GesWall. Is it a known issue? I don,t have a dump.

 

@erik
I disabled the service - I have not as yet gone into all the settings to try and narrow it down.

Just tested v2 and the bat file in question completes in approx. 8 seconds yet with v3 running it completes in approx. 14 seconds .

I wasn`t even 100% sure it was Alert causing the delay until I made a point of testing it a little earlier by removing and testing with v2.
(v2 might have been causing a delay of 2 seconds compared to no Alert running at all, but my measurements were by eye so are not accurate - with no Alert at all, the bat file completed in ~6 seconds)

 

What mitigation do I disable in order to use Windows Media Player 12? The offending file is blackbox.dll which is releated to MS DRM. If open WMP12 using a file, the HMPA will close it. My current workaround has been to use VLC on my test bench machine.

 

What mitigation is triggered? Click on Technical Details for info.