HitmanPro.ALERT Support and Discussion Thread

Hi,

I´m perhaps a bit slow, but I´m still trying to figure out how CryptoGuard actually works.

Does it simply block the modification of certain file types?

 

I MAYBE WRONG BUT IT BLOCKS THE BEHABIOUR OF THE BAD FILES AND ALSO THE TYPE OF MALWARE

 

November 6th, 2013, erikloman wrote:

Is that the kind of answer you were looking for?

 

Installed it a couple of days ago (19th of March).

 

Is it normal for the cryptoguard icon to be grey when it is enabled ?

SMB is also grey, whereas the other 3 are green & orange.

 

Yes, that is normal, see:
http://www.surfright.nl/en/cryptoguard
--> http://www.surfright.nl/images/alert256-welcome.png

But I think it would be good to know why those particular colors are used.
One might easily think that orange means something like a warning, something like 'partially enabled',
and one might easily think that grey means something like 'not enabled'.

I think it would be a good idea if an explanation for those colors could be given with the HitmanPro.Alert welcome screen.

 

HitmanPro 2.6.4 Build 75 TEST VERSION

Krusty13 and deugniet mentioned shutdown issues when installing 2.6.x branch on their computers with a Norton security product installed.

So I spent a few hours this Sunday trying to reproduce the shutdown issue and subsequently I developed a fix!

This build is to test compatibility with Symantec products like Norton 360 and Norton Internet Security.

Changelog

• FIXED: Compatibility with Norton products

Download
http://dl.surfright.nl/hmpalert_b75.exe

Note that this is a test version. It will auto downgrade to build 74 after a few minutes. This is not a problem for Norton users as the issue that has been fixed occurs right after installing Alert.

Please let me know how this version runs on your computer (make sure to mention whether you run a product from Symantec)

 

If the tile is filled with a color (including grey) the feature is enabled.
If the tile is hollow/transparent/black the feature is disabled.

You can see this by clicking on a tile and turn a feature off under settings.

Hope this helps.

 

Yes, I know.
But nevertheless, some users get confused by the different colors.
I can imagine that some users might think that orange means something like a warning, something like 'partially enabled', and that gray means something like 'not enabled', as in various other software gray is used to 'gray out' elements to indicate that a certain option cannot be selected.
For that reason, I think it might be a good idea to consider an explanation for those colors in the HitmanPro.Alert welcome screen.
Another option could be to simply use green for all features if enabled, and black if disabled, and not use orange and/or gray.

 

Downloaded hmpalert_b75.exe.

First I will uninstall .74, restart Laptop and then install hmpalert_b75.exe. And restart the laptop again.

I'll report the results asap.

 

Reporting back.

Looks like its fixed

I use W7 64 bits with NIS 21.1.1.7

Uninstalled .74.
Restarted laptop.
Installed b75.exe.
I see the mainscreen of HmP.Alert.
I opened Firefox 28.0 and I see the green fligh out.
Restarted laptop and it restarts ok.

Thank you Erik.

 

Installed and working fine here, Erik. No hang on shutdown either.

Great work!

Thanks for taking the time to sort this out for us Norton users.

 

HmP.Alert downgraded back to .74 (from .b75).

 

@ erikloman

Here's some weird issue related to HitmanPro.Alert version 2.6.3.74:

I notice that when I log off from one of my Windows accounts to change Windows accounts (Administrator to Standard User account or vice versa), after log off the Windows "Welcome screen" (login screen) does not appear, the system hangs (or so it appears), and the screen stays black.
The only way to login to one of my Windows accounts again, that is to force a reboot of the computer to get to the the Windows "Welcome screen" (login screen) after reboot.

This was not the case with HitmanPro.Alert version 2.5.6.64.

When I uninstall HitmanPro.Alert version 2.6.3.74 the issue is gone.
When I install HitmanPro.Alert version 2.5.6.64 the issue is not there.
When I update to HitmanPro.Alert version 2.6.3.74 the issue is back there.
When I uninstall HitmanPro.Alert version 2.6.3.74 the issue is gone.

I hope you can find a fix for this issue related to HitmanPro.Alert version 2.6.3.74.

In the mean time, could you tell me, is there a way that I can use HitmanPro.Alert version 2.5.6.64 without it automaticly updating to version 2.6.3.74?


-------
System:

Windows Vista Ultimate SP2 x86

G Data IS 2014

EMET 4.1:
--
DEP: Application Opt Out (though without any applications opted out from DEP)
SEHOP: Always On
ASLR: Application Opt In
Pinning: Enabled
--
Protection Profile: Popular Software
--
Application Configuration\ Mitigation Settings: Deep Hooks, Anti Detours, Banned Functions

 

Mine has downgraded back to .74 as well but is working fine now.

Thanks again, Erik!

 

Hi Erik,
I have also some remarks about the tile colors.
In my Dutch Vista system the tiles are in black (why ?) background.
So the SMB tile is black in black.

Further the last lines in the Dutch text when clicking on the Browser and SMB tiles can not be seen.

Please change this in one of the next updates.

 

Green background = HmP.Alert without Cryptoguard (see images http://www.surfright.nl/en/alert)
Black background = HmP.Alert with Cryptoguard (see images http://www.surfright.nl/en/cryptoguard)

 

Yes thanks.

So it´s basically acting like an anti file invector, as soon as a process is modifying certain file types, it´s stopped.

But what if some files are already encrypted, because CryptoGuard was too late? I still think a sandbox (virtualization) is the best protection.

 

Obviously sandboxing is great. I think HitmanPro.Alert is targeting the majority of users who are not tech-savvy. Those who only make sure they have one antivirus software active and perhaps something more.

 

That´s correct, I just wonder how strong CryptoGuard´s protection really is.

 

I second that suggestion.

green should indicate : enabled
orange should indicate: partially enabled
red should indicate : disabled, or corrupt
gray should indicate : not available

 

Erik,

While I can NOT say with 100% certainty that is / was HMPA, I thought I report it just in case.

I had changed the notification setting to Once per Login session and I was getting script errors in IE 11 on quite a few times when I first opened IE. Since then I have reverted to the default At browser start and the script errors have stopped.

Could HMPA slide-in notification, or lack there of, cause script errors?

W7 x64 SP1 N360v21.2

Thanks!

Edited to include the NOT.

 

I registered just so I could report this.

Bitdefender Internet Security is, again, triggering alerts from hitmanpro.alert 2. I think this happened after a recent update of Bitdefender. Whenever I open my browsers (opera, firefox or chrome), I get a warning that critical browser functions have been compromised and advised to scan for malware. Interestingly enough, the alert doesn't happen when I open Internet Explorer.

Just to make sure that it isn't a real malware, I ran rkill then I scanned with HitmanPro, MBAM, MBAM anti-rootkit, TDSS Killer, and Bitdefender, of course. Also running is the Malwarebytes Antiexploit. All came back negative for malware. Oh Hitmanpro detected some remnants of previous babylon installation but these had nothing to do with the alerts.

Anyway, the alerts doesn't appear if I disable Bitdefender Active Virus Control and reappears again when I turn it on. Could somebody confirm that this is a false positive and if there is a solution for this?

 

@Erik,

Please disregard my above post.

I believe the culprit was MBAM PRO 2.0. I've disabled the realtime protection and haven't seen the script errors since.

Thanks!

Edit : I am 99.999% sure now, that MBAM PRO cause this issue. Since disabling real time protection I have NOT seen script errors in IE11.

 

If you reboot, does the issue still occur?