HitmanPro.ALERT Support and Discussion Thread

Great work! The level of dedication on this product has been fun to beta and I'm proud to have the full version rocking on my computer

 

Build 180
Win 7 64 bit

I am a surfright reseller, I own two computer stores, I am excited about this new program and ready to sell this to all my customers. But there is one problem I hope you can fix.

Look in device manager, I have "teredo tunneling pseudo-interface" This device cannot start (Code 10).
This was discussed before, this program should not cause broken items in device manager. The first time I saw this I spent two hours trying to fix it. Now I know this program disabled it for a security reason, but there must be a better way than to just leave broken items in device manager. Please fix that.

Thanks
Mike
Mike's Computer Repair

 

Congrats!
I'm happy to see HMPA finally came out as official release tho I couldn't contribute much for the product.
I will definitely try new build and willing to buy it, but will be more happy if erik or mark can answer some questions which I sometimes threw to competitive products.

Do you employ as many/much available secure coding method on development of HMPA? Do you audit the product code against security breach other than peer review, especially fuzzing? Do HMPA uses 3rd party component? All component in HMPA employ DEP & ASLR?

These are a few most important question from even more questions which I saved in beta period not to bother you by flood of questions.

Anyway thanks and keep up good work!

 

I hope they will offer a discount for 3 years license to celebrate the release.
Something like they did on Black Friday 2 years ago, if I remember correctly....
Would buy it right away.....

 

Hi Erik,

So we still have some testing to do then?

 

Loman brothers started long ago with HitmanPro. The first HMP was a collection of freeware tools which you could use as a sort of rescue-CD after an infection. They got so much money from donations that they decided to make it their business. For references, the Loman brothers are working on security since first releases of classic tools like Spywareblaster and Ad-aware. Until HMP 3 they worked mainly in Dutch market (they also have a reasonable installed base in B2B, corporate clients).

With HMP, HMPA and Sitecom Cloud security, they can finance all the future development themselves. Besides their healthy business they have a track record in doing business in a smart way (using Wilders for testing, developing HMP in the router, using virtualisation of the CPU in HMPA, HPMA injecting DLL's in every process as a smart way to bypass the limitations of kernel patch protection).

So they are not the typical startup, they have been around for a long time and what little I know from them, they have a strong opinion on how to do business and develop their software, so it is unlikely they will sell out and hand over the control of their company and products to formal investors and corperate management.

Regards Kees

 

Thanks! knowing dev's history and background is very beneficial.

 

A work-around for me was to disable tunnel connectivity using IPv6 transition technologies before installing HMPA. No errors in Device Manager since then.

Code:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iphlpsvc]
"Start"=dword:00000004

 

Is 180 the final release. I just installed 179 yesterday. Should everyone uninstall what they have and install 180 now.

 

HitmanPro.Alert 3 build 181

A minor update.

Changelog

• Improved Shellcode mitigation
• Improved keystroke encryption on applications in the Other category
• Fixed keystroke encryption was no longer working when service was manually restarted.
• Changed default flyout to once per logon session
• Changed default live keystroke encryption in colored window border to off

Existing users are automatically updated.

Note: The changed defaults only apply to fresh installs. Upgraded installations keep the previous default setting to avoid confusion.

 

re: build 181

180 UI notifies Update is available ~ It will be installed on reboot
Upon reboot UI remains at 180 reporting Update is available ?

 

Upgrade from build 180 to build 181 (installed on reboot) went fine!
HPA-UI now shows build 181 and 'No update available'.

 

Thanks ... Okay, so stuck at 180 must be me....what's best way to progress ?
I've restarted once and shut down boot once... UI remains at 180 Update available.

Do I run the hmpaunistall tool in lieu of Programs uninstall or after Programs uninstall.

 

When it says update available, can you check wether there are files in the C:\Program Files (x86)\HitmanPro.Alert\Update Files\ folder?
Also can you run PendMoves and make a screenshot?
https://technet.microsoft.com/en-us/sysinternals/bb897556.aspx

 

+1 [8.1]

What about user manual/exploit test tool?

 

Congrats Erik and Mark!

I must admit that I never used it although I had bought licences for HitmanPro in December 2014.
Would those licences work also for HMP.Alert (if I want to use it)?
Are there any "precaustions" to make when one uses NOD32 for AV on Win-7 64-bit?
I have always been very reluctant to use any cloud-based program (I don't even use that option in NOD32); maybe I have to re-think that old policy of mine.
And to be honest, I don't want to "share" info in the cloud about my file-integrity-checkers NISFileCheck and ADinf32. But I guess that I am way too old-school.

Met vriendelijke groet, Jan

 

A HitmanPro license works on Alert as well (under the HitmnPro umbrella).

HitmanPro.Alert does not use the cloud.

ESET currently has a false positive on one of our drivers. We have submitted 2-weeks ago, received zero response. So if you have enabled PUA to maximum in ESET, be sure to disable that.

 

Thank you Erik.
Hmm, I do have PUA enabled in NOD32. Just for my understanding is this related to what member Securon posted in reply # 6484 in https://www.wilderssecurity.com/threads/hitman-pro-support-and-discussion-thread.236732/

 

Erik and Mark,

First off, congratulations on a great security product! Hitman Pro Alert has been running with no issues since build 149.

I also had the update problem this morning on one of the laptops and it turns out that AppGuard blocked it. The udpate was attempted before I could change AppGuard's protection level. The update folder was present with the program and drivers for 181. I set AppGuard to off and then I right-clicked on the Hitman Pro Alert icon in the taskbar and selected "check for updates". When I brought up the GUI it said an update would be installed at next reboot. On reboot I had build 181.

On a different laptop the update went smoothly and on reboot I could only use the wireless keyboard, not the built-in one. Another reboot fixed that.

 

For the 'exploit test tool + manual' please see:

http://www.surfright.nl/en/downloads/

 

Build 180 32bit Vista

 

Yeah, the Update folder was empty at the 180 UI.
I've since tried Programs uninstall with no luck....then I tried the uninstall tool with no luck. The uninstall tool I have is for v2. Is there an uninstall tool for v3
Now I'm at
All I find is 11mb excalibur
I've tried 181 install pulled from website with above Error 0

EDIT: maybe AppGuard is causal
04/08/15 13:30:24 Prevented process <HitmanPro.Alert> from writing to <c:\program files (x86)\hitmanpro.alert\hmpalert.exe>.
04/08/15 13:30:23 Protection level is set to <install>.
_____________________________________
Okay, I'm back in business with 181 pulled from site.

I never had an AppGuard issue for HMP.A beta build updates installer.exe
I think AG had an issue with 180 to 181 internal updater.

 

As Eric Loman mentioned before: "MPC-HC is not a good candidate to be manually added to the hpa exploit mitigation (Blue area)
I have removed HPC-HC x64 too from expoit mitigation

 

As far as I can remember I never added MPC-HC manually.

I am first going to install build 181 and reboot.

 

If you have DefenseWall installed, the update will also fail because it is automatically run as Untrusted. Alert will say it will install at reboot but it won't update and the same message still displays. For this case and other programs like AppGuard for example, it would be nice to have a manual update button for Alert.