HitmanPro.ALERT Support and Discussion Thread

Me also. Email sent.

 

Re: Seeking Testers for HitmanPro.Alert v2

Very creative!

 

HitmanPro.Alert Private Beta

The Private Beta emails have been sent a few moments ago. Please send me your feedback via email.

As promised a few screenshots:







A Public Beta will follow shortly (depends on the feedback of the Private Beta).

PS. You can still participate in the Private Beta, just send me an email.

 

I haven't recieved any email

 

Can you check again?

 

Now I have it

 

Erik,

I have UK Win7 32 with Dutch Chromium. No other security software besided EMET4 (injecting dll's into browser). I get two flyouts (Dutch & English). When I set fly out to never, Dutch flyout is gone, but English stays visible with every browser start.

Regards Kees

 

Thanks for Beta binary.
It seems, It is work for chrome&IE which is sandboxed by Comodo IS.
When browser start to work, Alert show me 2 alert. I think 1 is enought

 

That is the Flyout race Will be fixed tomorrow.

 

What does the system hardening settings do?

 

That feature is more like a vaccine. See here:
https://community.rapid7.com/commun.../vaccinating-systems-against-vm-aware-malware

 

Thanks for the information.

 

HitmanPro.Alert v2 - Public Beta

HitmanPro.Alert v2 Public Beta is available!

Please uninstall any existing version of HitmanPro.Alert. Both version 1 and the Private Beta of version 2 must be uninstalled before installing the Public Beta.

There is an automatic update mechanism in this Public Beta so that you will receive Beta updates and eventually the final.

Download: http://files.surfright.nl/beta/hmpalert.exe

Please let me know how this version runs on your computer

 

The problem of two flyouts (reported earlier) is not solved yet.

 

That is correct. We could not manage to fix this just just as it was more complex that anticipated. But there is an updater in the Public Beta so once we've fixed it you should get that.

What is your Windows version and browser are you using?

 

Windows 7 (32 bits) and Chrome. The flyout text is better (less hyped up, no thieves text ). When I disable flyout text, I only get one, so could be a workaround for the time being.

 

Using Win 7 64bits, IE 10, Sandboxie. V2 public beta works smoothly with two flyouts. When flyouts disabled, no flyouts at all. Cannot access settings when sandboxed (OK when non sandboxed) - presumably adjustment to Sandboxie required, but no real problem. Is there a test download to check everything is working, other than the settings button?

 

BUG REPORT:
Hello, I installed the beta into my computer. First install was successful, however this prevent one of my games from starting. (Dota 2 by Valve). Debugging the problem, I uninstalled HitmanPro.Alert (also rebooted) and the game now starts properly. Thinking that it is the system hardening feature of HitmanPro.Alert I tried to install HitmanPro.Alert again. Now I have a message (error) "Application did not installed". Their is however a folder created in Program Files(x86) of HitmanPro.Alert. But no service was installed. Opening Firefox still has the green notification even though the service was not running and not installed.

EDIT: Managed to fixed it. I traced down a registry key in services and hmpalert driver in the system32/drivers folder. Rebooted and now reinstalled properly.

EDIT: Trying to find out what happened, I uninstalled again and noticed that HitmanPro.Alert doesn't uninstall cleanly. It left registry key in the services and left it's driver in the system32/drivers folder. It also stops the loading of Dota 2 even if the mitigation is disabled. To sum up the bug report:
1. Doesn't uninstall cleanly.
2. Conflict with a game. (Dota 2)

 

?How to disable "automatic update mechanism" in HitmanPro.Alert v2 Public Beta?

I installed HitmanPro.Alert, rebooted, started IE and immediately received a message from ExploitShield

In Logs:
hmpalert_update.exe blocked from executing through Internet Explorer.

 

This is an FP from MBAE as HitmanPro is just downloading its update file using URLDownloadToFile API. HitmanPro.Alert is not executing the update from the browser.
MBAE (or ExploitShield) is rather trigger happy on that API and even blocking legit usage so it seems. Maybe Malwarebytes can fix that in a future update.

 

We've narrowed down the problem of the uninstall and it should be fixed now in a new Beta version 2.0.3 which is out at the same URL:
http://files.surfright.nl/beta/hmpalert.exe

We are looking at the DOTA2 issue.

Thanks for your thorough report

 

I know that.

But how to disable autoupdate? I don't need it. I want to download and install every version separately.

 

Good point
Adding it to the todo list.

 

Would it be possible to make a change to the GUI to manually add a path for a portable browser?

Also, are there no longer separate 32 and 64 bit versions?

 

Not in the initial version. I'll put it on the to do list.

There is one single binary which contains both the 32-bit and 64-bit files. Depending on your system it will drop the corresponding versions.

This is different from HitmanPro because HitmanPro does not have to be installed and can run straight from CD/DVD/USB/Network/Internet.