HitmanPro.ALERT Support and Discussion Thread

@GrDukeMalden thanks for the info. ransomware prevention is pretty new to me. could you recommend a good whitelisting application with HIPS

how is Kaspersky anti virus rated for ransomware?

 

It's pretty good, but I don't trust Kaspersky, because of the country their servers are based in. I'm not going to go any deeper into that.

Comodo firewall is decent. As of a short while ago it's a bit of a pain to find the free version on their website, but I've never seen an honest test of it where it failed to keep the system protected.

VoodooShield is also very nice against pretty much all malware, as well as any kind of malware that requires a command line or a script to be implemented.

I primarily have comodo firewall for the virtual desktop mode, because I have a little one that uses my PC from time to time and I need to protect my PC from them. I also use comodo firewall to enforce my VPN.
I've made posts elsewhere on here about the best way to configure it so that it won't bother you with any of those dumb "yes/no" alerts and just block unknown files and known malware. As I always say, "giving a user a yes/no alert is worse than having no security at all"

Voodooshield comes with a way to lock the UI to prevent users from allowing things if you pay for it and comodo's virtual desktop can be password protected to prevent a user from exiting it.

Anything blocked by comodo should be checked on virustotal and then rescanned on virus total a few hours later. If you can't scan in on VT for whatever reason, scan it with hitmanpro once and then again about an hour later if it comes up as clean both times. Then it's probably safe.

If that doesn't satisfy your paranoia, you can run the unknown file inside of comodo firewall's sandbox with the sandbox set to "do not show privilege elevation requests > run inside the container" and if the unknown file is able to run unhindered for about 5 minutes inside of comodo firewall's sandbox without virusscope killing it then it's most likely safe.

Oh and...if you can't find my posts about how to configure comodo firewall to be totally automatic. Just PM me about it.

 

I think this is False Positive.
I got this with installing Fox-it add-ons FileOpen and 3D plugin both:

 

Bleachbit triggers the cryptoguard feature. I've tried unblocking it but it just gets blocked all over again

 

BleachBit 2.2 does not trigger CryptoGuard on my machines.

 

That's the version of BB I'm using too.

 

Is there a way to exclude applications from HMP.A keystroke encryption? It's messing with a lot of my games. I see that there's an exclusion for exploit protection, but I see nothing for keystroke encryption. Thanks

-n8

 

I'm seeing a lot of messages saying "Unauthorized access blocked (Access Process Data)" in Norton Security for hmpalert.exe. It looks like there is a compatibility issue! (As is still the case with the Uplay overlay getting blocked!)

 

That just means Norton is blocking HMP.A from accessing its files. Norton will block any program, and even Windows from accessing its files.

I would suggest though that you add HMP.A to Norton's Exclusions as I've found that when ever Norton received updates to SONAR the machines CPU would run high.

Settings > Antivirus > Scans and Risks tab > scroll down to "Items to include from Auto-Protect, Script Control, SONAR and Download Intelligence" > Configure [+] > navigate to HMP.A > Add Files > Apply > OK.

 

HmP.A is the only Sophos product I use. Hope this isn't bad news for its development.

Thoma Bravo to buy Sophos: https://www.wilderssecurity.com/threads/thoma-bravo-to-buy-sophos-for-3-9-billion.422101/

 

I had no problems with SurfRight as a company when they were private...

 

Agreed. But private equity is the 1%, public equity is the rest of us. May be a desirable situation here specifically, but not sure generally..

 

Got a fly-out notification of an available update. Assume it to be build 791, has anyone installed it yet?

 

V3.7.1 build 791 installed and running fine on two 7x64 machines.

 

Thanks for the info, and good to know it's running nice on 7x64. Their website is still showing .789, and presumably an official announcement will follow shortly. Maybe they're all busy celebrating something...

 

I saw this post from Mark on Monday: https://www.wilderssecurity.com/threads/hitmanpro-alert-beta.394398/page-64#post-2864080

Then on Tuesday got the same fly-out notification as you did. But not much feedback posted in the interim, and I expected the general release to come later in the week.

 

V3.7.11 build 791. They certainly could afford to make the version number a bit more visible on that black background.

 

Ah thanks Tinstaafl, that clarifies it all better for me, and your post here also helps, and I hadn't noticed what Mark said at the end of his RC Release post.

 

Has anybody updated to build 791 on Windows 10 yet?

 

Yes, auto-updated to V3.7.11 build 791 on Tuesday, on Win 10 Home v1903 18362.418. No problems ...

 

Auto-update already arrived a few days ago, v1809. No problems so far.

 

+1 thanks!

 

+1 thanks!

 

On WIN-10-1909 B18363.418 :
No issues with HMP.A V3.7.11 build 791

 

Idem. No problems.