HitmanPro.Alert BETA

Anti-Malware detects and blocks the various Excubits tray tools. Admittedly, many AVs detect it. But maybe you can whitelist signed Excubits files, which you know are not malicious?
sig: Excubits UG (haftungsbeschränkt)

 

You can do that now:
- Open Event list and click on the alert -> Suppress Alert.

This should stop the AM module from blocking further execution of the flagged file.
Seems you have to reboot to get this fixed, guess we can improve that by releasing the file lock after suppression.

You can mitigate also by switching AM on/off saves a reboot.

 

Thanks, Ronny. I saw that Suppress Alert option, but I thought it only "hides" the alert, but still blocks the file. Maybe the function could be given a clearer name? Or am I the only one who misunderstood, lol?

 

I thought the same, shmu.

 

That normally shows on Intel supported hardware, can you DM me your CPU details and a screenshot of the GUI lacking that logo?

 

after some weeks with crypto v5 enabled, no issues so far.

 

Same here. I have all features enabled and no problems to report. Nothing in the custom HMP.A filter in Event Viewer either.

 

No issues after all this time on 839, except that I have set Cryptoguard to v4 almost all of the time, because v5 significantly reduces qBittorrents speeds.

 

Really?!?! I have used uTorrent and not noticed any noticeable slowdowns.

 

same for Tixati

 

Yes, I have seen speed drop from around 15 to 5 MB/s after setting it to v5, and restoring back when setting it back to v4. It doesn't happen always though, maybe it's related to the number of connections.

 

HitmanPro.Alert 3.7.9 Build 783 Release Candidate

Changelog (compared to build 781):

• Added CTF Guard under Risk Reductions, which validates CTF protocol callers. This new system-level exploit mitigation protects against abuse of the undocumented Windows CTF protocol as mentioned in CVE-2019-1162, discovered by Tavis Ormandy: https://googleprojectzero.blogspot.com/2019/08/down-rabbit-hole.html
  Example:
  
  

• Improved Keystroke Encryption on Windows 10 version 1903 (19H1). For example, renaming a file in a Save As dialog of a web browser should now work as expected.
• Improved Keystroke Encryption compatibility with ESET Internet Security.

Download:
https://dl.surfright.nl/hmpalert3b783.exe

Let us know how this version runs on your machine. We plan to update our entire community soon to this version. Thanks

 

Installed build 783 RC, no problems so far (uninstalled build 839 CTP1 first).

Win10 1809 build 18362.295 x64/Norton Security v22.18.0.213

 

Hi Mark,

Are these improvements destined for the build 839 CTP1 train as well?

 

Works as expected on my machine

 

Hi deugniet,

Are you seeing the green fly-out when you open Firefox, assuming you have Firefox installed of course.

Thanks.

 

Seems to be running fine on all of my Win10 x64 1903 machines Mark, except the "no green fly-out with Firefox on my machines running Norton" issue.

 

I see a green fly-out when I open Firefox 68.0.2. I dont use the Norton extensions (Norton Security v22.18.0.213).

 

Thanks for that. Oh well, I guess I'm [not] special.

 

Good question, I would also like to know.

 

Of course. They've actually been developed in build 8xx and back-ported to 783. So the coming 8xx build will have these improvements.

 

So no need to downgrade to build 783 from build 839 CTP1 securitywise?

 

Thanks! Any ETA on the coming 8xx build? We haven't seen a new one in quite a while and I love seeing the innovations.

 

Current 839 does not have the CTF Guard, so if you deem that scenario a "risk" on your environment then a downgrade to 783 would put an extra layer of defense in place.