HitmanPro.ALERT Support and Discussion Thread

No issues so far with build 562 on Win 10 x64 version 1511.

 

W7-x64 Professional + Home Premium, no issues running 3.5.3 build 562 PreRelease

 

No problems upgrading build 562 PR.

Win10 1607 build 14393.187 x64/Norton Security v22.7.1.32

 

HitmanPro.Alert 3.5.3 build 562 PreRelease
Problem:
a) Flyout for Protected Apps
b) Running applications - listed as Protected
c) hmpalert.dll is injected

BUT:
Keystroke Encryption is not active, and there is no colored window border
According to the settings, keystroke encryption and the colored window border should be active.
I disabled/enabled the Colored window border several times and restarted applications, but it doesn't want to appear.

Edit: I restarted the HitmanPro.Alert service (hmpalertsvc) and all is fine now

 

Working great so far here on B562, Windows 10 Home X64 Latest.

 

No issues noticed so far.

 

Continued corrupted downloads w/562. No clues in Event Viewer.

http://cloud.screenpresso.com/CmwN/2016-09-22_12h49_10.png

 

All was going well here until I tried to uninstall my Netgear WiFi adapter to install the latest firmware.

Code:

Log Name:      Application
Source:        HitmanPro.Alert
Date:          23/09/2016 5:02:22 PM
Event ID:      911
Task Category: Mitigation
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Krusty-PC
Description:
Mitigation   Anti-VM

Platform     10.0.14393/x64 06_37*
PID          6984
Application  C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe
Description  Setup Launcher Unicode 1.0

VMware
Process Trace
1  C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe [6984]
C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe /q"C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe" /tempdisk1folder"C:\Users\Krusty\AppData\Local\Temp\{4F21
2  C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe [2172]
"C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe" -runfromtemp -l0x0409  -removeonly
3  C:\Windows\SysWOW64\dllhost.exe [3580]
C:\Windows\SysWoW64\DllHost.exe /Processid:{FCC74B77-EC3E-4DD8-A80B-008A702075A9}

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="HitmanPro.Alert" />
    <EventID Qualifiers="0">911</EventID>
    <Level>2</Level>
    <Task>9</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-09-23T07:02:22.791331400Z" />
    <EventRecordID>5931</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Krusty-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe</Data>
    <Data>Anti-VM</Data>
    <Data>Mitigation   Anti-VM

Platform     10.0.14393/x64 06_37*
PID          6984
Application  C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe
Description  Setup Launcher Unicode 1.0

VMware
Process Trace
1  C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe [6984]
C:\Users\Krusty\AppData\Local\Temp\{4F21F9AC-80D0-4D42-9FA5-459B3FA2CADE}\setup.exe /q"C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe" /tempdisk1folder"C:\Users\Krusty\AppData\Local\Temp\{4F21
2  C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe [2172]
"C:\Program Files (x86)\InstallShield Installation Information\{200F4AEE-982C-48EA-AC85-EF36FEB662C2}\setup.exe" -runfromtemp -l0x0409  -removeonly
3  C:\Windows\SysWOW64\dllhost.exe [3580]
C:\Windows\SysWoW64\DllHost.exe /Processid:{FCC74B77-EC3E-4DD8-A80B-008A702075A9}
</Data>
  </EventData>
</Event>

 

Set Vaccination to Passive if you are going to install software that has no Authenticode signature (you'd be surprised how many publishers release software without a digital signature).

 

I was uninstalling, but ah! Thanks for the tip.

 

Windows7 (x64) - HMPA 3.5.3 build 562 without Problems!

Windows XP SP3 (x32) - HMPA 3.5.3 build 561 and build 562 Problems:
System-Eventlog:
Typ: Fehler
Quelle: Service Control Manager
Ereignis-ID: 7022
Ereigniszeit: 23.09.2016 09:35:05
Benutzer: n/z
Computer: PCKSI
Beschreibung:
Der Dienst "HitmanPro.Alert Service" wurde nicht ordnungsgemäß gestartet.

Under Services:
Name Displayname Status
hmpalertsvc HitmanPro.Alert Service Start (!)

The Service do not start fully. After Windows-Login there is no HMPA-Symbol at the Taskbar (at the bottom right).
How can this be fixed?

With the last official Version HMPA 3.5.2 build 558 there where no Problems with this Service under XP, but Problems with Printing from Office-Programs.

Please help!
Thank You

 

HitmanPro.Alert 3.5.3.562 Released

Automatic update is rolling.

Changelog

• Added CryptoGuard 4.5
• Improved LoadLib mitigation technical details
• Fixed LoadLib mitigation false positive on computers with specific old Hewlett Packard printer driver
• Fixed typo in Dutch language
• Updated Danish language

 

ok, just updated (via automatic update channel): no problem to report so far [10x64 AU]

 

Is the "pre-release" version posted on Wednesday the same as this "released" version?

 

obvious

 

Yes, it is.

 

updated, no issues so far.

 

I got the upgrade is available popup, and allowed to proceed. However, after the restart, the tray icon didn't appear.



Also, the service doesn't load. So, something is not right with the install.

View attachment 254404 View attachment 254404

 

I got the upgrade is available popup, and allowed to proceed. However, after the restart, the tray icon didn't appear.

View attachment 254403

Also, the service doesn't load after rebooting. So, something is not right with the install.

 

I don't how I did that... with the two preceding posts.

 

It seems to be an issue with Windows XP.
LW19 reported similar, last Monday with build 561, and today with build 562.

 

So, I am not alone....Thanks.

 

Thanks!

 

You're welcome.
Next time, if you like, you can check out for yourself, whether the release version is the same as the prerelease.
The build number is a first clue. If anything changes, Erik and Mark use a new build number. If the build number is the same, it should be the same build/version.
To be sure, you can compare file version properties. Download and save both the prerelease and the release version installers, right click, choose Properties, tab Details, and compare prerelease and release version file versions.
Finally, you can compare file sizes: Properties, tab General, Size.
If build number, file version, and file size is the same, the prerelease and release version installers are the same.

 

Unfortunately windows 10 pro AU was not able to start with hmpa 3.5.2.558/562 installed. i've had to boot up in save mode and uninstall hmpa.
For this reason no HPMA-Protection at the moment.