HitmanPro.ALERT Support and Discussion Thread

Thanks!

 

If the new HitmanPro.Alert version 3 is as good as SurfRight claims, I'll buy 5 licenses at the release date. Especially since HitmanPro is included!

 

Hope there will be a nice discount for the final version and then count me in

 

Nice update for HitmanPro.Alert. Will wait for version 3 Although it could be nice if they merge HitmanPro and HitmanPro.Alert.

 

A new zero-day flash exploit to test against the new exploit protection:
http://www.fireeye.com/blog/technic...omised-serving-up-flash-zero-day-exploit.html

 

And this is patched by adobe..
https://www.wilderssecurity.com/showpost.php?p=2342838&postcount=86

And interested to see if it able to mitigate this vulnerability..

 

Definitely a good thing that the license will work for both programs.

 

HitmanPro is integrated in Alert. You can start a scan from Alert and you can follow the scan progress in Alert while HitmanPro is scanning silently in the background without GUI.

 

I just made a movie of HitmanPro.Alert 3 blocking this exact attack on both SEHOP and StackPivot. In this video you see Alert 3 blocking the attack, triggering the SEHOP protection: http://www.youtube.com/watch?v=Y2CpzyDX2Qs&feature=youtu.be

Contrary to EMET, HitmanPro.Alert 3 also offers ROP mitigation on 64-bit applications and offers dynamic heap-spray mitigation (no manual fiddling that's required with EMET to block tailored heap-sprays). Ow, and HitmanPro.Alert does not need .NET Framework

 

Is HitmanPro.Alert compatible and complementary to WSA? Will it offer any more protection that WSA doesn't already cover? I asked this before and then got the answer as WSA already does everything HMPA does. But now as HMP is gonna be integrated in HMPA and it would the main product, has anything changed?

 

I'am glad i bought 2 HMP licenses from last Black Friday deals.

I did test new HMP.alert beta, and it did install fine and it works, good.
i did have problems uninstalling one version few weeks back. (link.)
But all is good now.

edit: if price is going to be same, then i buy HitmanPro - 3 PCs 3 years plan next time, because i have 3 PC:s.

 

ams963, I know that it is compatible with WSA. I've been using it for a while now and haven't had any conflicts with it yet. As far as complementary, I can only speculate that it would in concerns with exploits. I know that WSA has cryptolocker protection.

 

Does SurfRight have any plans for making this application work with KIS 2014? On our family PC, I am running Windows 7 Home Premium and default installation of KIS 2014. I have a licensed copy of Hitman Pro 64-installed (3.7.9 Build 212 64-bit).

Each time I install your new beta, I cannot update Kaspersky 2014. When I remove your application, KIS-2014 updates are successful. A similar complaint was noted much earlier in this thread.

 

I'd like to buy (3) licenses. I hope there will be a special discount for Wilders members

 

So you ported ROP mitigations to x64

Regarding the dynamic update of blocking address ranges to protect against (known, common) heap-spray attacks, I have three questions:

1) Do you update new addresses through the cloud (no update/re-install of HMP.alert)?

2) Do you include any other addresses as the ones listed below (the EMET default as far as I know)?
0x0a040a04
0x0a0a0a0a
0x0b0b0b0b
0x0c0c0c0c
0x0d0d0d0d
0x0e0e0e0e
0x04040404
0x05050505
0x06060606
0x07070707
0x08080808
0x09090909
0x20202020
0x14141414

3) Would you mind sharing those extra addresses with us poor manual fiddler's

 

Get a multi pc license. If you wait for a promo you might never get one LOL

 

Yes Alert has both a 32-bit and 64-bit disassembler on board. The Alert exe is still just 2.5MB

The dynamic heap spray detection in Alert 3 monitors memory as it is being sprayed with sleds and shell code. This means we dont work with fixed set of addresses.

Hope this helps.

 

HitmanPro 3.7.9 and Alert 2.0 work with KIS 2014.
We are still tinkering on getting Alert 2.5 and 3 to work with KIS.

 

Well, do I understand it right when I would conclude (in laymen's terms) that Alert looks at the "eggs" being "planted".

 

Hitman PRO.alert 3 and hitman pro going to be the same product?
or you will offer 2 products with difference price?
Hitman Pro Alert have inside Hitman pro cloud scanner?

 

https://www.wilderssecurity.com/showpost.php?p=2342317&postcount=1256

 

Yes. You could see it like that

 

They are two different products. But they do interact with each other (like integrating the scan in Alert). Alert will download HitmanPro when you start a scan (left tile in the screenshot).

There is only one license (no change in price) that will unlock both products. So you basically always get one for free

Gerard was a tad quicker than me

 

I would definitely purchase an Alert 3 license if I know that the protection features that overlap with KIS, for instance, prevent keystroke capturing, will not interfere with KIS 2014. I assume if I wanted to use the prevent keystroke capturing option on Alert then the relative option of Kaspersky keystroke capturing would have to be turned off as I'd imagine they could conflict.

 

Thanks for info. Can't wait for version 3