HitmanPro.ALERT Support and Discussion Thread

What is the name of that process?

 

Sent you a mail with eventlog.

 

Got it, thanks!

 

Edit: I guess: Application C:\Users\****\AppData\Local\Temp\jre-8u31-windows-au.exe and/or Filename C:\Users\****\AppData\LocalLow\Sun\Java\AU\LZMA_EXE

 

Received new beta by mail. I will uninstall java 8u31 and reinstall java 8u25. And then update to 8u31 with beta 140.

 

Uninstalled java 8u31 and tried several times to (re)install 8u25 with no luck (W7 64 bits/build 139). See jpg for java-udpate-error. So I cant test build 140 and internal update 8u31. Could someone else test it?

 

Please try the following steps:

1. Uninstall Alert
2. Uninstall Java
3. Install Java 8u25
4. Install Alert build 140
5. Update Java via the Check for Update application (came with Java)

 

Solved. After uninstalling java AND Hmp.Alert and then reinstalling java 8u25 and build 140 the internal update 8u31 finally works. Thanks Erik.

 

Thank you for your time helping to solve this issue

 

HitmanPro.Alert 3.0.24 Build 140 Release Candidate

Changelog

• Improved mitigation of Java applications
• Improved ROP mitigation (solved false positives)

Download
http://test.hitmanpro.com/hmpalert3b140.exe

Please let me know how this version runs on your computer

 

As a test have you considered uninstalling EMET to see if it solves the Firefox hanging process problem? I occasionally have a problem when starting Firefox 35 where the window doesn't display and I have to kill the process and restart, but shutting down is consistently clean (note that I don't use EMET or any other exploit mitigation software along with HMPA).

 

Just installed build 140 on both laptops, rebooted. the windows media player ROP alert is fixed. Nice work! The encrypted characters still show up in the address bar of both IE11 with enhanced protection mode and Chrome x64 while keystroke encryption is enabled.

 

No problems here.

 

Build 140 looks to of solved all issues I've had with previous builds.

Nice work!

Thanks.

 

I'd like to see user options to disable that and startup with Windows. (Firewall and service manipulation is tedious.)

 

Again gibberish with build 140; this time in IE11.

(however IE11 is very unstable on my system)

 

Yes, but I like to see what apps are connecting out. More user options would be good though.

 

Fix the WMP errors I had reported; thanks!

 

@erikloman

I noticed that every time an alert has been triggered an encrypted message is sent to http://alertcloud.azurewebsites.net/Report.ashx.
Might it be an idea to create an opt-out so no data will be sent without user interaction?

I assume that some users would like to have control over this feature.

 

@erikloman ,

One quick question - I reset HMP.A 3 build 140's setting and when I plugged in a wireless keyboard receiver I wasn't prompted to allow it. It had previously been allowed with older builds but I thought resetting the settings would of made HMP.A forget it. Is this expected behaviour?

Thanks,
Krusty

 

Why aren't the RCs automatically updating to the latest version? Will RCs update to the final stable version when it comes out?

 

Two of the applications, both portable, that were OK in b139 and the previous build (137, I think) are now not protected after upgrading to b140. No flyout, no colored border. "Re-mitigations," restarts, reboot, no fix.

 

Have you performed a Reset Settings? (That clears the apps)
Do you see the apps listed under HKLM\Software\HitmanPro.Alert ?

 

The Reset Settings currently does not reset the BadUSB allowed devices. Good point.