HitmanPro.ALERT Support and Discussion Thread

No worries Stupendous Man,

As was reading a previous post it appears i was a few minutes behind your post.

Regards.

 

Yeah, that's what I thought. And that's OK, of course. Better two persons asking the same thing twice, than no one asking that question.
And I'm happy you mentioned quarantine, which I didn't. I hope that, if something was quarantined, it can be restored.

 

Many thanks for your replies,

first of all, the following: When I uninstall the HitmanPro.Alert (HitmanPro still on the system), everything is back to normal. Windows will start and the speakers will be active again.

To your questions:

• The problems appear, when I install HitmanPro.Alert alone. Than, there is no option to run the software - only after additional installation of HitmanPro. A scan with HitmanPro was done and found threats were removed/quarantined.
• Scan results:
  Malware _____________________________________________________________________
  
  C:\...\..\Downloads\Galaxy_S7_Audio - CHIP-Installer.exe -> Quarantined
  Size . . . . . . . : 1.474.568 bytes
  Age . . . . . . . : 1040.6 days (2016-03-22 21:06:19)
  Entropy . . . . . : 7.2
  SHA-256 . . . . . : 554F4C49CE51B74D4A766FDA8A48A716ABB0DB8F51F0815BF9C310C322EA04DE
  Needs elevation . : Yes
  RSA Key Size . . . : 2048
  Authenticode . . . : Valid
  > Kaspersky . . . . : not-a-virusownloader.Win32.DownloadSponsor.pe
  Fuzzy . . . . . . : 103.0

• Potential Unwanted Programs _________________________________________________
  
  HKLM\SOFTWARE\Classes\AppID\Amazon1ButtonRuntime.dll\ (AmazonAssistent) -> Deleted
  HKLM\SOFTWARE\Classes\AppID\AmazonAppIE.dll\ (AmazonAssistent) -> Deleted
  HKLM\SOFTWARE\Classes\AppID\{87BDDAA1-CB99-4B47-89F6-7651D7731BC6}\ (AmazonAssistent) -> Deleted
  HKLM\SOFTWARE\Classes\AppID\{ABD8D96F-8F32-4167-B31F-FED987846B81}\ (AmazonAssistent) -> Deleted
  HKLM\SOFTWARE\Classes\AppID\{D2E5FFD9-E488-4844-8C6D-051AA67C99F2}\ (AmazonAssistent) -> Deleted
  HKLM\SOFTWARE\Classes\WOW6432Node\AppID\Amazon1ButtonRuntime.dll\ (AmazonAssistent) -> PendingDelete
  HKLM\SOFTWARE\Classes\WOW6432Node\AppID\AmazonAppIE.dll\ (AmazonAssistent) -> PendingDelete
  HKLM\SOFTWARE\Classes\WOW6432Node\AppID\{87BDDAA1-CB99-4B47-89F6-7651D7731BC6}\ (AmazonAssistent) -> PendingDelete
  HKLM\SOFTWARE\Classes\WOW6432Node\AppID\{ABD8D96F-8F32-4167-B31F-FED987846B81}\ (AmazonAssistent) -> PendingDelete
  HKLM\SOFTWARE\Classes\WOW6432Node\AppID\{D2E5FFD9-E488-4844-8C6D-051AA67C99F2}\ (AmazonAssistent) -> PendingDelete
• Only Windows Defender Security Center is running into addition
• AdGuard AdBlocker and uBlock Origin for Firefox are running

NO for HitmanPro.Alert and YES for HitmanPro to remove some found threats.

 

Same here!

 

That seems to suggest that purely the installation of HMPA is the cause of those issues. I don't know why.
I hope QA engineer @RonnyT, or developers @erikloman or @markloman can help find the cause of your problems and can help find a solution.

 

I think so too...
This was also the reason why I tried different constellations/scenarios with the programs...

Many thanks for the help and time you have provided!

 

You're most welcome.
And as I said, I hope RonnyT, Erik or Mark can help find a solution.

 

Today my pc doesn't started anymore...
Now 5 hrs. later I got my pc booted via Windows 10 USB-Drive and got the safe mode finally for deinstallation HitmanPro.Alert (Version 3.7.9.773).
Let's wait what's coming up with next build...

 

I sure can imagine you don't want to try HMPA anymore.
I still hope @RonnyT, @erikloman, or @markloman will jump in and try to help find the cause of your problems and find a solution.

 

support@hitmanpro.com

 

Ronny has answered via email in the meantime and I will give the update of the program a new chance and test it.

 

HitmanPro.Alert 3.7.9 Build 775 Release Candidate

Changelog (compared to build 773):

Improved

• Code injection, which will result in faster boot times on Windows 10. It also fixes a rare issue a few Windows 10 users had where the system did not finish boot correctly.
• Heap Heap Protect mitigation as it should now play more nicely with certain .NET applications.
• Hardware Assisted Control-Flow Integrity, our Last Branch Record CPU assisted ROP mitigation, to fix false positives we're seeing on some newer CPUs.
• Alert info regarding our real-time Anti-Malware and Code Cave mitigation.

Fixed

• Rare bug in CryptoGuard which sometimes forgot to make a backup of a file - which you could lose in the event of a ransomware attack.

Download
http://test.hitmanpro.com/hmpalert3b775.exe

Please let us know how this version runs on your machine. Thanks!

 

@markloman,
Hi Mark,
Usually, release candidates are offered in the HMPA beta thread, like build 775 was, yesterday.
Why is the build 775 release candidate now also offered in this thread?
Is that because of the fix for "a rare issue a few Windows 10 users had where the system did not finish boot correctly", that may help user Erik T, or is there some other reason to offer build 775 release candidate in this thread, like the other improvements and fixes?

 

Yes, we'd like some more users to experience this build before we upgrade everybody early next week.

 

I have my firewall set under "other in exploit mitigation". No problems.
What do the experienced users of HPA think?

 

hmpalert3b775.exe works well and has fixed my start problem on Windows 10 Home, Version 1803. Thanks.

 

Great!!
And thanks for reporting.

 

Windows 10-64 bits installed build 775 over build 773, no issues what so ever.

 

Hey, thanks for the reply's.

 

Service notice: We've enabled the automatic updater and all our users are now automatically updated to build 775 of HitmanPro.Alert.

 

775 running good on Windows 10 1803 Pro here.

 

Let build 775 install on my Vista laptop, and rebooted to a black screen with only the mouse pointer showing. Turned it off and then back on, selected "start Windows normally," and ended up in the black screen again. Next, I booted into Safe Mode and used System Restore to go back to 773; then the machine booted up normally. Will disable automatic HMP.A updating until this gets resolved.

 

Updated and perfect. Good job.