HitmanPro.ALERT Support and Discussion Thread

Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.

  1. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    1,242
  2. Lonesome Bob

    Lonesome Bob Registered Member

    Joined:
    Aug 24, 2016
    Posts:
    17
    Location:
    unknown
    There are Windows updates available following the AU upgrade, make sure those are installed. I've experienced similar startup behavior on Windows 10 AU systems without HMPA, even when using simpler BIOS-based machines. As an experiment I would suggest unplugging all attached USB devices (except wired keyboard and mouse) then setting the system’s boot device order such that the Windows OS drive becomes the first listed device.
     
  3. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    It is indeed just the border that is missing. Passwords are protected. Next build has a fix for this.

    Thanks for reporting!
     
  4. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    965
    Location:
    USA
    I just ran into an issue with HMPA 3.5.3 build 562, while trying to login to another forum that runs on vBulletin v4.2.3. I have ruled out my browser and browser plugins (tried with a fresh Firefox default profile, no plugins, as well as with Chrome). Only by disabling HMPA will it let me login. If I let HMPA protection run, I quickly get locked out for 15 mins before I can try again. I requested a password reset, then disabled HMPA, and then my login was permitted normally. So I logged out, re-activated HMPA, & the next login attempt failed. Site error message indicated that I had used an incorrect userid or password too many times. Wait 15 more minutes ...

    I have the link if anybody needs it.

    I don't know if this issue was present in the last couple of HMPA builds, because it's been a while since I logged into this other site.

    Any suggestions? I searched this forum for vBulletin issues and came up empty ...
     
    Last edited: Sep 27, 2016
  5. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    What other AV are you running? Try turning off SSL/TLS filtering in that AV.

    Note: HMPA does no SSL/TLS filtering, but it might conflict with SSL/TLS network filters.
     
  6. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    965
    Location:
    USA
    I have Avira Pro running with all web, browser, and email protection disabled. Local file real-time scan only. No network filtering or proxies, other than Windows Filtering Platform (WFP) used by the Windows Firewall. That and HMPA is all. I run a lean, mean, malware fighting machine :)

    Edit: just noticed that the forum in question does not even use a secure connection ...
     
  7. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Avira Pro does extensive network filtering.
    Just open an administrative command prompt and type:

    netsh wfp show filters

    notepad filters.xml

    And then search for Avira

    Notice lots of filtering applied to the network. This is the source of the conflict. Apparently Avira filtering conflicts with Alert's filtering. We'll try to improve this in the next build.
     
  8. fa9ool

    fa9ool Registered Member

    Joined:
    Sep 27, 2016
    Posts:
    1
    Location:
    UAE
    Hello there guys nice to meet you all i am new on the forum and asking for some help or advise it's about the program called hitmanpro alret.3.5.3 the problem is it keep gives me false alert about some programs for example Skype~ Some Online Games~ Windows Media player + VLC player and it slows down Kaspersky Scan and some stuff i tried Malwarebyts before but i didn't like it because it wont catch some malware i tested and i cant find any option in hitmanpro alret about blocking or unblocking programs and such any ideas how to trun of false alret guys.
     
  9. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    965
    Location:
    USA
    OK, thanks Erik!!! I will buy that explanation. I just tried the same scenario with HMPA active, and with the Windows Firewall disabled, and I was able to login OK. So it looks as if the workaround for now is to disable one or the other. Good thing I don't need to visit that site very often, but it does leave me wondering what other troubles that conflict could bringo_O
     
  10. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    574
    Has Symantec gotten back to you? What did they say?
     
  11. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Unofficial at this stage.

    I believe Norton is flagging Alert because Norton was triggering a Cryptoguard block when Norton updated to new versions. I have also told Symantec that Erik has released new versions of Alert that solved that problem.

    Cheers.
     
  12. jaan michiels

    jaan michiels Registered Member

    Joined:
    Sep 28, 2016
    Posts:
    3
    Location:
    Belgium
    Hi, I have been using this product for 1 year now.
    I'm pretty happy with software but I ran yesterday and today very annoying issue because of hitman pro alert. I have installed Forza Horizon 3 and I couldn't launch the game, it close after some second.
    I have reinstalled windows for that game and it worked until I installed hitman pro alert then it couldn't launch. Can you please fix it.
    Thanks
     
  13. mirage22

    mirage22 Registered Member

    Joined:
    Apr 20, 2016
    Posts:
    51
    Hi a problem has cropped up on our Office systems running Windows 10 Enterprise edition.

    Once updated to the 3.5.3 version, the system boots up and programs such as Edge and all others throw up the following error: Class is not registered.

    Uninstalling HMPA restored everything back to normal.

    I also lost another System at the same time that would not boot up at all. Cause Bitlocker was enabled, DISM or SFC would not run without running through hoops. I don't know if HMPA was responsible, but we have just re-formated the drive and reinstalled windows.

    Is there a way to disable auto update on the rest of the machines?
     
    Last edited: Sep 28, 2016
  14. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,843
    Location:
    the Netherlands
    Earlier this month, Erik mentioned:
    Therefore, you may need to add Forza Horizon 3 as an exclusion in HMP.A.
    To do so, open the HMP.A user interface,
    in settings, choose Advanced interface,
    click the blue Exploit mitigation tile, and then Applications,
    scroll to the right, and under Exclude, choose Add exclusion, navigate to the Zombie City Defense 2 exe, and add it as exclusion.
    Please let us know if that helps.
     
  15. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Norton was shredding files (overwrite files with random data). This is what we detected. We have made a workaround as we very much like to work together with Norton. I am sad to hear that Symantec decided to blacklist our software. They could at least have the decency to contact us :thumbd:
     
  16. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Are there any events in the event log indicating Alert is the cause?
     
  17. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Erik, I gave them contact details. :(
     
  18. Dragon1952

    Dragon1952 Registered Member

    Joined:
    Sep 16, 2012
    Posts:
    2,469
    Location:
    Hollow Earth - Telos
    I have the same problem with Maxthon. I get a screen full of garbage when i start it.
     
  19. mirage22

    mirage22 Registered Member

    Joined:
    Apr 20, 2016
    Posts:
    51
    I have to check tomorrow. But what I do know, is that uninstalling Alert, restored the PC. Something a simple restart didn't help earlier.
     
  20. guest

    guest Guest

    Yes, there is a way:
     
  21. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    574
    Thanks for following up with this. Hopefully SurfRight/Sophos and Symantec will work things out.
     
  22. SeaTea

    SeaTea Registered Member

    Joined:
    Aug 10, 2015
    Posts:
    4
    HMPA seems to break my firefox 49.0.1. It blocks starting firefox with error message:
    Code:
    Mitigation   DEP
    
    Platform     6.3.9600/x64 3f_01
    PID          5604
    Application  C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Description  Firefox 49.0.1
    
    EIP = 0403D224, State = 0x1000, Type = 0x20000, Protect = 0x2
    
    Stack Trace
    #  Address  Module                   Location
    -- -------- ------------------------ ----------------------------------------
    1  04030955 (anonymous; xul.dll)    
                58                       POP          EAX
                c1e808                   SHR          EAX, 0x8
                03e0                     ADD          ESP, EAX
                8b442430                 MOV          EAX, [ESP+0x30]
                8910                     MOV          [EAX], EDX
                894804                   MOV          [EAX+0x4], ECX
                5f                       POP          EDI
                5e                       POP          ESI
                5b                       POP          EBX
                5d                       POP          EBP
                c3                       RET        
    
    2  0FE92715 xul.dll                
    3  FFFFFF81 (unknown)              
    
    Process Trace
    1  C:\Program Files (x86)\Mozilla Firefox\firefox.exe [5604]
    2  C:\Windows\explorer.exe [6752]
    3  C:\Windows\System32\userinit.exe [8724]
    4  C:\Windows\System32\winlogon.exe [11168]
       winlogon.exe
    
    5  C:\Windows\System32\smss.exe [6080]
       \SystemRoot\System32\smss.exe 00000124 0000007c 
    
    I had the same with firefox 48.0.1. Tried to remove and reinstall firefox but have the same error.
    Firefox 49.0.1 portable works normally.

    Is this a known bug ?

    (Using Windows 10 latest updates and HMPA 3.0.42 build 190, no updates available)
     
  23. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,843
    Location:
    the Netherlands
    HMPA 3.0.42 build 190, no updates available?
    Oops! That's not as it should be.

    You should have the most recent HMP.A 3.5.3 build 562 offered, automatically.
    HMP.A checks for updates, frequently.
    How long have you been running HMP.A 3.0.42 build 190?
    If you have been running HMP.A 3.0.42 build 190 for more than a couple of hours, and you didn't get HMP.A 3.5.3 build 562 offered, something seems to be wrong.

    I think you'd best download HMP.A 3.5.3.562
    here https://www.surfright.com/en-us/surfright/alert.aspx
    or here http://www.surfright.nl/en/downloads/
    and then run the downloaded installer to upgrade your installed version to the current version.

    Please let us know if updating HMP.A to the current version solves the reported issue.
     
  24. guest

    guest Guest

    That's a version from May 2015 :eek:
    Sometimes there can be some "little" auto-update issues, but for that long period?
    Ok, we do not know yet at what time it was installed, so...
     
  25. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,843
    Location:
    the Netherlands
    Indeed. I could not rule out that SeaTea had saved that 2015 installer last year, or downloaded from some not up to date third party download site, and installed that version only minutes ago, or a couple of hours at most. In that case, perhaps the autoupdater mechanism could have missed the new version, and it should be offered soon.
    But I could also imagine that HMP.A 3.0.42.190 was some build for which Erik and Mark didn't activated the autoupdater, for some reason, and forgot to, afterwards.
    I hope Erik and Mark will notice SeaTea's report, and will have a look at this case.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.