HitmanPro.ALERT Support and Discussion Thread

I use them both in same time right now (with real-time protect ) , it's because there are both great product .
Malwarebytes did great at IP、website protect , Zemana had did great at detect & clear the threats .

Zemana also had a Keystroke Logging Protection , and that is what Malwarebytes doesn't have .
And also Zemana had better scan speed

I had MB and Zemana's lifetime license , but HMPA is trial version , and almost end ,
still waiting for better discount(Special offer) for HMPA

By the way , my AV is Emsisoft ,
my system now had Emsisoft + Malwarebytes + Zemana + HMPA ,
and they can work together with out any problem

(just install for fun , normal do not need so much like this )

 

Notebook/tablet style devices tend not to provide internal space for installing additional storage drives particularly those having rotational platter designs. There may be the odd device which could accommodate PC-Card/PCMCIA HDD, mini SSD, or M.2 expansion but those would be rare.

Then there is the issue of protecting physically attached backup drives from malware intrusion. Network servers, network attached storage devices and possibly even cloud-based storage services provide a level of isolation and protection particularly from those ransomware types designed to rewrite and encrypt a system’s master boot record.

At work we use Dell PowerVault storage arrays for storing system images with several containing multiple 64TB RAID arrays. Some images are stored for security testing purposes while others are maintained for daily system backups. Hourly incremental snapshots are possible but there just hasn’t been any demand.

Having said that there are similar NAS solutions scaled for individuals and smaller workgroups, two companies come to mind, QNAP and Synology. Both offer entry level iSCSI-based NAS products:

QNAP TVS-471
QNAP TVS-871 i3/i5/i7
QNAP TVS-1282T3

QNAP TS-453U-RP
Synology RackStation RS816

 

For home users a good option is an external hard drive which can simply be turned off after a backup is made. That's a lot safer than any backup solution that remains actively connected.

 

My workstation's C drive is only 110gb Two 1-terabyte storage drives are kept disconnected when not in use. Very practical, especially when an internet connection isn't wanted. Can the tablet accommodate an external drive via USB and/or adapter? Very practical and simple. I apologize as this is off the HMPA topic.

 

* bump

 

What is up? (Or where?)

 

bump, sorry (i hope the latter is right word )

 

Ah, OK, I understand.

But I suppose the rest of what Erik mentioned still applies:

 

yes, i remember...

, Sophos!

 

NiteRanger’s comments in post #13477 indicated he wished to store whole system images externally to an always connected storage drive. In the reply NiteRanger received from cruelsister in post #13479 it was suggested to add an internal drive for incremental backups. In my opinion this wasn’t going to be a workable solution since the OP indicated he is using a tablet device.

My suggestion to NiteRanger was to use a home NAS device to provide storage for complete images as well as full and incremental backups without the bother of reattaching an external drive particularly in the case of hourly incremental backups.

In my setup I have a daily scheduled task that transfers a full system image to a NAS device containing two 8TB hard drives in a RAID 1 configuration. The task takes about 8 minutes to complete a 50GB transfer. If something ‘bad’ happens during testing I can recover in a few minutes simply by re-imaging a system using an image from one of the previous days. If on a given day I’m doing a lot of testing and recovery I’ll simply run the scheduled task manually for as many times as needed.

About the only maintenance involved is every couple of months I’ll delete some of the older system images to reacquire storage space.

I don’t consider such suggestions off topic. I think it is essential to learn and share how best to manage and maintain a quality testing environment for HMPA as well as those additional security products SurfRight/Sophos suggests is essential to a complete security solution.

 

I understand; I was commenting on the advisability of using any kind of continuously connected device. With regard to using a NAS I'd be interested to know what you think about this:

https://www.reddit.com/r/DataHoarder/comments/49dipy/how_can_i_protect_my_nas_againta_ransomware/

 

Nah, I was speaking strictly for myself, I have.....problems in this area. Actually, I am interested in learning more about an NAS/RAID setup, my current means is effective but no-tech. I will look into this more.

Is there a new build coming out soon? Fixing some user-specific issues?

 

have Patience...
They are working on a new version.

 

I know this very well.
Done this asap I installed HMPA besides G Data end 2015. Expanded the exclusions to every single exe inside the G Data Folder (even the ones for Tray) now. When iTunes is excluded also from the Exploit Protection it hang at closing, while iTunes states that it's saving the media library. If not, than it freezes the desktop/computer. (If I do a soft reset the monitor gets black and I hear shutting down services (like Skype) but the PC never shuts down fully, so I have to do a hard reset.)

Until Creators Update there were no such hardlock/freeze issue with any program, even in the combination of HMPA and G Data. They coexisted peacefully.

 

For my Windows 7 systems, I never made any exclusions for HMPA and G Data or vice versa. Nor do I disable G Data's exploit protection, anti-ransomware, BankGuard, or keylogger protection.
On Windows 7, I notice no conflicts at all.
Well .. one minor issue that I notice once in a while, is a momentary interference when typing in IE11 address bar or web forms or such. I'm not sure if that is because of HMPA's keystroke encryption, or G Data's keylogger protection, or a conflict. The issue is so minor, I'm too lazy to sort it out.
I can imagine that things are different for Windows 10, compared to my Windows 7 experiences.

 

Also no exclusions, but then again, I use the built-in Windows 10 security system to avoid such conflicts in the first place. Also have the periodic keyboard lag in W10/Internet Explorer, it is EXTREMELY annoying. Guess what, disabling Keystroke Encryption makes it go away, but for this browser, it's not a permanent option. I wonder if anyone has such lags using the Edge browser, seeing as it doesn't accommodate this feature?

 

Thanks.
On my Windows 7 system, what I see is no lag, but missing the first few keystrokes altogether, once in a while.
Yes, I guess it's HMPA's keystroke encryption, and disabling it would stop that annoyance, I suppose.

 

Had it also for testing purposes on W10 for a while, not noticing problems. But setting the exclusions seemed the right way (worked so far 'til now). BankGuard still active. AR not.

 

Should hmpa have a exclusion for a separate hmp app.

 

Not sure to get what you meant, you think about excluding HMP in HMPA? if that , there is no need. HMP is just a scanner.

 

?
HitmanPro (HMP) scanner is intrinsically a part of HitmanPro Alert. It's built into HMPA in the event you get an exploit mitigation alert and the scanner can be then be executed straight from the Alert screen. There is no real time feature to HMP to justify its being excluded from anything, least of all HMPA.

 

I often also experience this also, or scrambled characters, in Firefox search bar or when typing in Gmail, on Win 10 (primary machine).

I am pretty sure it's HMPA keystroke encryption, but I put up with it, as I'd rather not disable it. I do not use any other anti-keylogging software so it is not a conflict in that regard.

 

@erikloman,
@markloman,

Here's some feedback on what I reported earlier.

January 24 and February 3, I reported the CryptoGuard and LibreOffice x86 on Windows x64 issue. As Erik mentioned on February 27, the CryptoGuard and LibreOffice x86 on Windows x64 issue should be solved with the new major version of CryptoGuard. But as Erik mentioned later, the major new build is taking long because of all the overhead, so that is still taking some time.

January 24, I also reported some other issues that I noticed, see additional issues 1 to 7 reported in that January 24 post.
Here's the good news: those additional issues 1 to 7 are solved, for quite some time.
Issues 1 to 6, the issues with marking\copying\moving text or files, may have been mouse related. (When the cat's away ...!) I changed the mouse, and I haven't seen those issues again. (And let's not blame the cat, blame me for dropping the mouse once too often.)
Issue 7, LibreOffice Writer crashing when closing, was also solved. I don't know if that issue was solved in a later LibreOffice version, or in HMPA, but it is solved.

So, of my January 24 and February 3 reports, only the CryptoGuard and LibreOffice x86 on Windows x64 issue remains, which will be solved with the new major version of CryptoGuard, later.

 

Sometimes i quickly switch to the browser and type something in, and then i can see a few wrong characters.
But it doesn't happen very often.