I am sorry. I am able to reproduce your issue. Past week was crazy due to deadlines. I promise I will come back on the LibreOffice issue this week.
HitmanPro.Alert 3.6.3 Build 586 RC2 Changelog (compared to 582) Fixed bug in CryptoGuard correlation Notes This build uses Microsoft co-signed...
Running 2 keystroke encrypters does not make sense. I'll see if we can detect Zemana and disable the keystroke encryption in HMPA for that process.
The Locked feature is for Sophos product where you cannot modify the settings locally. But you also see Locked when the service is not running....
Nothing new to report yet. We are very much involved in pushing code updates into business products of Sophos. These are also in this build. I...
We have read the posts above related to MBAM v3 and thats why we came up with this solution.
In build 582 we now prevent the mbae.dll to load in processes mitigated by HMPA (mbae.dll is still allowed to load if the application is not in...
Disable the Network Lockdown feature. That should help to some extent. Last resort, rename C:\Windows\System32\hmpnet.sys to hmpnet.bak
HitmanPro.Alert 3.6.3 Build 582 RC1 Changelog (compared to 580) Improved installer/uninstaller Improved compatibility with MBAE, MBAM v3 and...
We have made integration for Intercept X (it is 75% HMPA). The binaries are the same between HMPA and IX. Sophos builds our code base in their...
It is grayed out because you are running it NOT from the installation folder. Use the shortcut on the desktop or startmenu which points the...
We are investigating. Stay tuned.
You have a hook on the cryptography API in Edge. Specifically EncryptMessage().
I can confirm that this ransomware family is blocked by HitmanPro.Alert.
We have currently _one_ detection record of LibreOffice triggering CryptoGuard. Is anyone else seeing this issue with LibreOffice?
What application is failing to add?
HitmanPro.Alert 3.6.3 Build 580 BETA We have received several minidumps from members here which led to this build. Thank you!! Changelog...
HitmanPro reads raw disk sectors. It can happen that a file is on the physical disk but already deleted in the file system. Windows then has to...
HitmanPro.Alert 3.6.3 Build 579 BETA Changelog (compared to 578 BETA) Microsoft co-signed both hmpnet.sys and hmpalert.sys drivers Download...
That .doc is allowed to be read (otherwise you cant send documents among colleagues). But all files flowing from the .doc are blocked. So...
Correct. All files dropping from Word or PDF-reader are blocked from execution by "Application Lockdown". Such applications are not meant to write...
Send me a PM with your product key and I'll get that sorted out.
The test is valid for CryptoGuard, not for Alert as a whole. But I understand the difficulties testing bigger scenario's. The more steps involved...
Perhaps, we did make a few changes in CryptoGuard related to correlation ... While useful to some extend, the "quickie" test does not show how the...
Oh crap. Thanks! Will solve it tomorrow.
Separate names with a comma.
