HitmanPro.ALERT Support and Discussion Thread

Guys -- who cares?

 

As promised, an update.

As some of you know, we've release HitmanPro.Kickstart last week. This is the worlds first solution that is able to bypass MBR ransomware (and bootkits) and FBI police ransomware / BKA-Trojaner (Reveton, Weelsof, Winlock etc). You can boot right into your ransomed Windows and remove the ransomware using HitmanPro.Kickstart.

The problem with ransomware is that all variants block access to the desktop. Either through a full screen window or means of an alternate desktop environment. The fact that the user cannot access the desktop, calling in help from the internet or running a scan with your favorite AV from removable media is impossible. Newest variants also block access to Safe Mode so removal through that path is also closed by the ransomware.

Since the user cannot start a cleanup tool on the ransomed PC we provide HitmanPro.Kickstart as a solution.
www.surfright.com/kickstart

Ransomware is very prevalent and most regular computer users have to go to a computer repair shop to remove ransomware. While rescue-CDs also can work, we've compiled a comparison between rescue-CDs and HitmanPro.Kickstart:
http://www.surfright.nl/kickstart#comparison

While HitmanPro.Alert RC3 was released on June 16th, we had the summer period (read: vacation; several developers had 3-4 weeks). After that work has already been done on HitmanPro.Alert. Biggest change is that we got rid of the hmpalert process which could be closed by Task Manager. Some of the new techniques while developing HitmanPro.Alert made it into HitmanPro.Kickstart as well.

Point is, management chose to finish HitmanPro.Kickstart before completing HitmanPro.Alert. Ransomware is a huge problem in The Netherlands and Germany.
See also: http://blogs.technet.com/b/mmpc/archive/2012/12/04/msrt-november-12-weelsof-around-the-world.aspx

Now that Kickstart has been released, development on HitmanPro.Alert continues. Although I must admit, Christmas is here in two weeks.

We aim to release another Release Candidate before Christmas and release a final in January 2013.

 

Six months ago, as I said.

Anyway, nice to see that a new beta and the final release are so close!

 

So, how is it going?

 

English must not be your first language as you are unable to see your contradictory replies.

there have been 2 new beta's released after the question (which you quoted in your first reply to me) was asked. So what i am saying is that i am fully justified in asking if a compatibility situation has changed after 2 new releases. Understand? I bet not

 

Where can you download the most current beta?

 

The problem here is your evident lack of reasoning: It doesn't matter when it was first stated that HMP Alert and Rapport are not compatible, if you search for Truster Rapport in this thread and you find HMP's developer saying that they are not compatible yet and then don't find a changelog in which the compatibility has been implemented it's clear that nothing has changed. Here are the changelogs:

In one of your replies to me.......

Meanwhile go on scanning with the ten scanners in your sig, that's the reason way an intelligent person buys a computer: To keep it busy scanning all day.

And you are right, English is not my first language. It's my fifth one.

And then there are three or four languages that I speak even worse than English.

 

Enough with the childish bickering. The more you guys try to be right, the more you both put yourselves in the wrong.

 

http://www.surfright.nl/downloads/beta

 

I'm excited to try Alert, but waiting for the next version. Any updates on the timeline?

 

Its actively being worked on. We are adding a few features. We are losing the hmpalert.exe process because it can be easily killed. And we are improving the hook filtering and GUI elements. Rest assured its back on track a new build will be available soon (no exact date yet though).

 

Hi erikloman

Many thanks for the update info.

Also is there any reason that the beta page is showing HitmanPro 3.7.0.185 as if it is still Beta

With regards
Take Care
TheQuest

 

Thats 185 when it was still beta.

 

Hi erikloman

Thank you for your reply.

But I am still not really! any the wiser .

With regards
Take Care
TheQuest

 

just one last comment;

i dont think you understand what on-demand scanners mean either, if you do then how did you come to the conclusion that i am using them everyday? lol

please accept my apology, i will cease my pointless bickering, i think i forgot i had a life to live

 

Using Win 7 64 bit F-Secure and Sandboxie.
Hitmanpro.Alert RC3 flags trouble which I reckon are FPs after all the usual checks.

ntdll.dll
NtCreateProcess 0016000C
NtCreateProcessEx 0016100C
NtCreateUserProcess 0016200C
ZwCreateProcess 0016000C
ZwCreateProcessEx 0016100C
ZwCreateUserProcess 0016200C

ntdll.dll
NtCreateProcess 0013000C
NtCreateProcessEx 0013100C
NtCreateUserProcess 0013200C
ZwCreateProcess 0013000C
ZwCreateProcessEx 0013100C
ZwCreateUserProcess 0013200C

Program is just what we need for latest malware rejection and much appreciated. Looking forward to the next release.

 

Its coming. Working on next release! Thanks for reporting.

 

Just downloaded latest beta.

Hitmanpro.alert now working perfectly with Sandboxie and F-Secure. Flyer informs me that all AOK.

Log file shows "OpenProcess 4328 failed with error 5". What does this mean please?

Thanks for the update.

 

Good news....

 

http://i.imgur.com/4WPOXLQ.png

whats up with hitman detecting sandboxie as ramsonware

 

Thats been fixed in build 189. See this post: https://www.wilderssecurity.com/showpost.php?p=2192164&postcount=5126

 

THANKS,
btw theres several legitimate windows 8 files still being detected as unknown .

 

Turn off EWS. Its not a mode you should run on regular basis. Thanks for mentioning though

 

Hello, is HitmanPro.Alert still being developed?

 

Yes it is.