HitmanPro.ALERT Support and Discussion Thread

Running Win7 x64. Upgraded directly from build 155 to 178- Rebooted and could not log in with my password, as my wireless keyboard was not working (no characters were being digited on the screen). Rebooted again to same situation. Had to plug in an old keyboard to be able to log in.
Maybe the problem was due to ExeRadarPro that upon login asked if I would authorize the new build of HPA, however after authorization the wireless keyboard was still not working until HPA notified me that (I forget the exact phrasing) a new USB device had been plugged in (it referred to the keyboard but I imagine actually is the wireless base) and I authorized it

 

Yes, this situation was caused by EXE Radar Pro. HitmanPro.Alert 3 asks the user to authorize the USB device with keyboard functionality (we changed the BadUSB logic since build 177 which is why you may need to re-authorize the device). But because EXE Radar Pro blocked HitmanPro.Alert, the user could not be informed and the keyboard did not work. Good to hear you figured it out though.

 

Did you forgot to give hime a bicycle?

 

Downloaded build 155 from Surfright site last nite. I usually leave the browser open, as well as Thunderbird email client, when I put the pc in sleep mode. This morning after bringing the pc from sleep mode, FF would not load pages until it was restarted. Thunderbird would not respond to get messages until restarted. Have not updated to your latest build.

 

Running W7-x64, Office-2003, FF 37.0, IE11, hp240, hpa 178
For test purposes I installed Monzilla Thunderbird 31.6.0 (template 'Office' all mitigations enabled) and imported ALL Mail folders (>1GB)
from Outlook-2003 into Thunderbird, no problem what so ever during installing/ opening/ closing/ uninstalling.
The flyout (blue) is showing correctly too .......

 

I would go for hpa build178, it is noticeable better than build 155 for both my laptop and desktop environment.
I always do a clean install, so uninstall the current hpa build first before installing the newer build, plus a 'Reset settings' in the hpa general settings.

 

Only one time so far....some recent event is blocking Norton Toolbar in sandbox'd Chrome.
I was swiftly cycling Chrome sandbox editing SBoxie config trying to force Norton Toolbar to show.
I'll check plugin's
Thanks

 

I also think it's taking very long to release the final version. Perhaps it was a better idea to make a standard list of apps that need protection, and just scrap the feature that allows users to add apps themselves to the protection list. HMPA should also be compatible with the most used AV's, and other popular tools like Sandboxie. Compatibility with MBAE and EMET should not be high on the list, because they are similar tools.

 

Can you give some more info about this? Is it related to exploit protection or safe browsing?

 

Thanks for saying out loud (or rather writing reasonably) what many people perhaps and myself for sure think silently. Because the way things are going, that is working on each and every compatibility issue with more and more applications is 1- a hell of a work for the developer and 2- condemned to an everlasting odyssey. I subscribe to your definition of a possible working perimeter.

 

Exploit Protection.

 

No problems with Firefox 37.0.1 (W7 64 bits/build 178/Sandboxie 4.16).

 

Just wondering, are you (also) using a master password in Thunderbird? I suspect it has something to do with that feature. The problem is intermittent and (so) I find it difficult to see a pattern, but I haven't seen it (yet ;-)) after disabling the master password feature. And besides... I experience something similar in Firefox (also intermittent) with the master password feature which makes Firefox hang infinitely.

 

I don't usually use a master password in Thunderbird even if I have the StartupMaster add-on in case of (kids around, FBI, girlfriend, ex-girlfriends... you see the topic!).
I've just set a password to test, restarted Thunderbird without any issue.
Of what I imagine with the issues you're encountering is Thunderbird, Firefox tied (linked, called by..) another application, such as an anti-something... sorry but I'm a poor adviser.

 

Mitigation DEP

Platform 6.3.9600/x64 06_45
PID 6724
Application C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Description Firefox 37.0.1

IP = 034F0080, State = 0x1000, Type = 0x20000, Protect = 0x4

Stack Trace
# Address Module Location
-- -------- ------------------------ ----------------------------------------
1 603F2711 xul.dll ??1ElementAdder@js@@QAE@XZ
8b4604 MOV EAX, [ESI+0x4]
83c420 ADD ESP, 0x20
85c0 TEST EAX, EAX
0f858c000000 JNZ 0x603f27ab
8d4c2418 LEA ECX, [ESP+0x18]
e8c2000a00 CALL 0x604927ea
8d5e28 LEA EBX, [ESI+0x28]
8bcb MOV ECX, EBX
e884000000 CALL 0x603f27b6
84c0 TEST AL, AL
7505 JNZ 0x603f273b
384638 CMP [ESI+0x38], AL
7533 JNZ 0x603f276e
8b0f MOV ECX, [EDI]
57 PUSH EDI
e889e2ffff CALL 0x603f09cc


Process Trace
1 C:\Program Files (x86)\Mozilla Firefox\firefox.exe [6724]
2 C:\Program Files\Sandboxie\Start.exe [6488]
"C:\Program Files\Sandboxie\Start.exe" /env:00000000_SBIE_CURRENT_DIRECTORY="C:\Program Files\Sandboxie" /env:=Refresh "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

3 C:\Program Files\Sandboxie\SbieSvc.exe [1292]

SBIE v4.16 ~ FF37/37.0.1 has not been too stable on my box....so, may be FF

 

I don't know if the developer of HMP.Alert would agree with this suggestion :
Be it now as HMP.Alert is still in its RC stage or once the final release available, there will always be compatibility issues even if with very few applications. For instance I've read here on our thread that AdwCleaner had a rather conflictual relationship with HMP.Alert : in such cases would it not be pertinent to make available an ON/OFF switch for HMP.Alert? HMP.Alert starting and running as a service makes it cumbersome to stop and restart. Just a switch for pause or radically ON/OFF could be helpful, seems to me. If it is feasible of course.

 

Is there anything that CryptoMonitor blocks that HMPA doesn't, i.e. if I've got the latest HMPA, do I need to even consider CryptoMonitor as I'm concerned about system performance of having both running if it's unnecessary!
http://www.bleepingcomputer.com/for...ypto-ransomware-before-it-encrypts-your-data/

 

I'd like to see in the right click menu (of the tray icon) a shut down option.
except this,

 

Of course, but isn't it good there's a choice in anti crypto ransomware software?
Like there is not just one or two antivirus software options but many, as there are many tastes of many kinds of software.
I like HMP.A a lot, but I welcome other anti crypto ransomware software alternatives.
I think it's always good to see choice and alternatives.

Of course, but we know not everyone is as conscious of the need to make images and backups, same as not everyone is as conscious of the need of vulnerability patching.
And also, I think most users would rather like to prevent crypto ransomware issues, than need to restore from images and backups.

 

Windows 7 64bit + HitmanPro.Alert 3.0.35 build 178 Release Candidate problem with Firefox 37.0.1:

 

You're right.
I overlooked the fact that JohnDowns mentioned running both HMP.A and CryptoMonitor together.

 

Reproduceable? Or incident?

 

No reproduceable. It only comes up (rarely) when I open many tabs. The previous version had also.