HitmanPro.ALERT Support and Discussion Thread

I used to do this every time i installed a new app but forgot to do it the last few months. I just checked and HMPA 366 was being monitored so i changed it to allow.

 

Maybe it helps to delay the starting of the service (2 minutes).
Automatic -> Automatic (delayed start)

 

Running bld 369 on Win 7 x64 and have noticed that in the encryption window it is actually showing what I am typing. See screen shot taken when I was logging into Wilders. Shows all letters as upper case and no digits. Does this in any browser on any site, https or otherwise. Previous builds showed random characters.
Only other security software is AppGuard and Sandboxie.

 

Further to my post above I used the HMPA test tool when logging in - see below. Not very good

 

Does this happen only in Sandboxie?

 

HitmanPro.Alert keeps consuming about 45% of my CPU and Firefox memory usage keeps increasing (currently 2 GB!).

EDIT: already grew to 2,6 GB while typing this simple message...

Anyone else noticing something like this?

 

It happens in Firefox both sandboxed and with Sandboxie disabled. It also happens in chrome and IE11 neither of which are sandboxed so SB is not the cause. I also disabled AppGuard in case that was interfering but still happens.
Get the fly outs and everything else 'appears' to be working as it should.

 

False positive when you perform repairs with Tweaking.com - Windows Repair.
Best regards.

 

I think FF / CF 46.0 x64 is slower than 45.0.x considerably. I may uninstall HMP.A at some point to test if they run quicker.

 

What other security software do you have running on your machine? I'd like to investigate. And what version of Windows? Thanks!!

 

Let us know your finding. Suspect same, but it is very subjective and not really consistent ...

 

Emsisoft Internet Security 11.7 & Malware Bytes Anti-Malware Premium 2.2; Windows 10 Pro x64

 

@ erikloman and markloman

I suppose HMPA would easily block this exploit? With that I mean, if the Flash exploit is blocked from running the payload, the kernel exploit doesn't even get a chance to run, am I correct?

http://blog.trendmicro.com/trendlab...omware-spreads-flash-windows-kernel-exploits/

 

1. I agree that a visual indication that an app does not have all mitigations enabled would be a good thing.
2. I didn't realize there was a 16 icon/entries limitation, but I see you're correct. It would be good if there was a quick and easy way to see a list of all protected apps.
3. Maybe replace the "Benefits and Advantages" link with a link that opens a list of all protected apps
4. Are you suggesting optional password protection of settings? I think that's a good idea.

 

A task bar right-click disable also, though maybe this isn't possible without a reboot.

 

hi, mark!
The same behaviour (high CPU/RAM usage) hase also been reported by an italian user (Firefox 46 involved)

his specs:
OS: 8.1 home x64 (updated)
Zemana antimalware free
MBAM free
Alert 369


Reference: 1

 

@erikloman
@markloman
Regarding HMP.A build 368 and earlier and KB3146706 on Windows 7 x64,

We're two days later, now.
How much feedback and how much time does SurfRight need to push HMP.A build 369?
As the previously reported issue is crippling HMP.A for Windows 7 x64 users who have KB3146706 installed, I cannot quite understand why SurfRight wants to take so much time before pushing out build 369 for automatically updating.

 

They have to make sure, that build 369 doesn't introduce more problems before it is pushed to all users.
Maybe some of these problems are 369-related, maybe not:

 

Yes, I understand, of course.
But I think that the issue of HMP.A being crippled on Windows 7 x64 systems on which KB3146706 is installed is such serious issue, that I think it's not wise waiting to fix that. Other issues, that may or may not be related to build 369, can be solved in a next bugfix build.

 

That's correct!

 

That sounds terrible.
What do you mean by totally broken? And how did you notice there was no protection at all? Based on what the UI showed, or using the test tool, or otherwise? And of course: which other security products do you use?
Perhaps that combined information can be helpful to Erik and Mark, even as long as you don't find the time for troubleshooting.

 

I got the notification yesterday, rebooted, and updated on XP.....Seems OK, for me.

 

I think the slightly changed injection in 369 does not recognize your system. I'll send you a PM to work this out. Meanwhile you should stick at 368.