HitmanPro.ALERT Support and Discussion Thread

Ignore that post, now deleted. User error

 

Folks, there is now a dedicated thread to discussing Public BETA and Public CTP builds of HitmanPro.Alert.

Check it out here:
https://www.wilderssecurity.com/threads/hitmanpro-alert-beta.394398/

The CTP2 is posted there as well

 

thanks erik

 

Can't get rid of this alert. Tried inserting usb dongle when "BadUSB" is disabled, no alert when connected, same when enabled "BadUSB" and inserting usb dongle no alert, just after PC restart, when i click "Block" keyboard gets locked, when i click "Allow" keyboard is working fine. How to stop it from showing up at every PC restart? There should be some option to "Allow and remember" or something like that because it starts to get annoying. With all beta, stable builds same result/alert window upon restart with "BadUSB" is disabled or enabled.

 

So far everything working good here.

 

Does this require a clean install (I think build 601 required this), or can one just install over the top of buil 593?

 

over the top as usual...

 

I don't recall that build 601 required a clean install, nor do I see any reason that the update to build 602 should require a clean install.

What Erik mentioned with build 601 was:

So, a clean installation was not required, but in case a clean installation was performed, a reboot was required for full protection.

By the way, Erik said:

Anything regarding HMPA beta can probably best be posted in that new HitmanPro.Alert BETA thread.

 

Latest beta works great! No issues with any programs except bitdefender but thats a PITA with most programs these days.......

 

Which beta is it that you are referring to?
I suppose you mean HMPA 3.6 Build 602? Or do you mean HMPA 3.7 Build 708?

Also, Erik said:

Anything regarding HMPA beta can probably best be posted in that new HMPA BETA thread.

 

Oops, cool. I am running the beta

 

Both HMPA 3.6 Build 602 and HMPA 3.7 Build 708 are beta.

 

To correct my previous statement it appears that the new thread - linked below - is for v3.6 and v3.7 betas

https://www.wilderssecurity.com/threads/hitmanpro-alert-beta.394398/page-4#post-2681313

 

As Victek edited his/her post, I edited mine.

Indeed, I read Erik's post as saying that thread is dedicated for all public BETA and CTP discussion. So, for both the 3.6 beta and the 3.7 beta.

 

I believe you're correct. I will edit my post

 

That worked great thanks!

 

Great! Thanks for reporting.

 

Im not sure what this dump I got means. Is this actually malware injection?

Code:

Mitigation   CallerCheck

Platform     6.1.7601/x64 v593 06_3c
PID          4428
Application  E:\SteamLibrary\steamapps\common\Hellpoint Demo\Hellpoint_Demo.exe
Description   5.5.3

Callee Type  LoadLibrary

Stack Trace
#  Address          Module                   Location
-- ---------------- ------------------------ ----------------------------------------
1  0000000006414328 (anonymous; mono.dll)   
                    4883c420                 ADD          RSP, 0x20
                    488b4d98                 MOV          RCX, [RBP-0x68]
                    4c8b5da0                 MOV          R11, [RBP-0x60]
                    49890b                   MOV          [R11], RCX
                    488b75f8                 MOV          RSI, [RBP-0x8]
                    c9                       LEAVE       
                    c3                       RET         

2  00000000064141C6 (anonymous; mono.dll)   
3  0000000006413F8F (anonymous; mono.dll)   
4  000000000641339E (anonymous; mono.dll)   
5  00000000063F7C82 (anonymous; mono.dll)   
6  00000000063F733C (anonymous; mono.dll)   
7  00000000063F3BA4 (anonymous; mono.dll)   
8  00000000063C7F14 (anonymous; mono.dll)   
9  00000000063C6F2B (anonymous; mono.dll)   
10 00000000063C3BE7 (anonymous; mono.dll)   

Code Injection
00060000-00061000    4KB n/a [6904]
00070000-00071000    4KB

Process Trace
1  E:\SteamLibrary\SteamApps\common\Hellpoint Demo\Hellpoint_Demo.exe [4428]
2  C:\Program Files (x86)\Steam\Steam.exe [6508]
"C:\Program Files (x86)\Steam\Steam.exe" -silent
3  C:\Program Files (x86)\Steam\Steam.exe [4320]
"C:\Program Files (x86)\Steam\Steam.exe" -silent
4  C:\Windows\explorer.exe [5884]
5  C:\Windows\System32\userinit.exe [5848]
6  C:\Windows\System32\winlogon.exe [928]
winlogon.exe

 

I am using HitmanPro.Alert 3.6.6.593.

I have several portable builds of EssentialPIM Portable on my system (3 copies). These are portable and are able to run fine together, but I just run one at a time.

My issue is that I am able to add two copies of the freeware version onto Exploit Mitigation, but the one copy of the Pro version gets caught by HitmanPro.Alert with an exception. If I disable Exploit Mitigation before running EssentialPIM Pro Portable , or add it as an exception and then run it, I am NOT able to add it to the Exploit Mitigation at all. When I try, I pick the Other template, and nothing happens. No templates work at all for it.

If I do the same process for the free version of EssentialPIM Portable, I am able to add it just fine to the Exploit Mitigation.

Please investigate.

 

In which paths are the applications located?

 

This is a compatibility issue with mono.dll. Try the 602 build to see if that fixes it.

 

C:\EssentialPIM
C:\SYNC_EssentialPIM_SYNC
C:\SYNC_EssentialPIM_SYNC_PRO

 

@erikloman,
@markloman,

I think there was no reply to Oli95xz's post.
Could it be that HMPA's updater is failing, in some cases?

I use KC Softwares' SUMo (Software Update Monitor), to check for available updates for several software.
At SUMo's HitmanPro.Alert page, I see that some HMPA users are still on old HMPA versions. For instance 3.6.5.592, but also 3.6.4.588, 3.6.1.574, 3.5.2.558, 3.1.9.363, 3.1.0.340, or 2.6.5.77. (*)
Are those users blocking HMPA's updater, or is HMPA's updater failing in those cases? (I can't imagine those systems were not rebooted since those old HMPA versions.)

*) N.B. Which versions are shown at SUMo's HitmanPro.Alert page depends on which versions are on systems recently scanned with SUMo. This changes in the course of the day.

 

Erik and Mark. I have a problem with build 602. Badusb does not work. I restarted several times and reinstalled. I have upgraded keyboard drivers (Microsoft Wired Keyboard 600) but nothing. I came back to version 3.6.6 build 593 and everything works very well.
Can it be solved? Thank you!

 

For reasons unknown, I have NOT been able to download the production version of HMPA from the Hitmanpro.com website via IE or Edge. Is anyone else experiencing this same problem?!?