HitmanPro.ALERT Support and Discussion Thread

Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.

  1. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    I think the only way to see it working is to use the test program. When you launch the keylogger test, an input area is displayed. When you move the focus to a browser and start typing, the input area on the test program will show your keystrokes being encrypted. Encryption is done under the covers and there is no visual effect to indicate encryption taking place. I prefer Keyscrambler's solution which displays the encryption while you type.
     
    Last edited: Oct 9, 2014
  2. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Thanks Adric

    Pete
     
  3. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    I also noticed a black flyout from HMPA during the install that the component (I think Powerpoint) was added to the exploit mitigations just before the error occurs.
     
  4. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    578
    Location:
    Hengelo
    Aha! That doesn't happen when I install Office. If this happens on your machine, Application Lockdown might be triggered and block something. This should be logged by Alert in the Windows Event Log. Could you take a look?
     
  5. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    Sorry, I just restored from a backup. I will have to recreate the situation and get back to you on that.

    Edit: Here are the pertinent entries in the eventlog. No alerts from HMPA.
     

    Attached Files:

    Last edited: Oct 9, 2014
  6. SLE

    SLE Registered Member

    Joined:
    Jun 30, 2011
    Posts:
    361
    HMP Alert CTP4 quite often writes errors about audiodg.exe in eventlog on my Win8.1 x64 system.


    hmp.jpg
     
  7. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    @SLE

    I can confirm this as well on my Win 8.1 x64 system.
     
  8. WSFfan

    WSFfan Registered Member

    Joined:
    May 10, 2012
    Posts:
    374
    Location:
    The Earth
    I can confirm audiodg.exe error on Windows 7 Ultimate SP1-x64
     
  9. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,977

    I just got back to the snapshot earlier, tonight. I tried disabling "Active Vaccination", and it has made no difference.
     
  10. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    1,272
    Location:
    UK
    Installed hitmanpro.alert ctp4 build 92 on win xp pro sp3 and I have come across a couple of things.

    1) dchanger or "drive letter changer" program when launched gives a blank error window and terminates.
    Nothing in eventvwr.msc.

    Switching vacination to passive now works with dchanger from active everything else is enabled.

    2) While in eventvwr i noticed a "warning" for himanpro.alert that it has checked for updates but none were found.
    Surely it should not be classified as a warning but as "information"?

    Security=PFW zemana antilogger winpatrol hitmanpro.alert cp4 no AV.
     
    Last edited: Oct 10, 2014
  11. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    Mark, I am also seeing this problem on Win8 with HMPA installed and trying to install Office 2003. The W8 event log shows the same entries I already posted for W7. I turned everything off except for safe browsing and the result is the same. Are you testing this with 32-bit?

    Erik can tell you a story about testing with 32-bit. :D

    Off2003.jpg
     
    Last edited: Oct 10, 2014
  12. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    578
    Location:
    Hengelo
    Yes I have been testing this on Windows 7 32-bit. Could you take a look at the Windows Event Log and see if there any entries that seem to coincide with the error?
     
  13. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    Same stuff I sent you before. Uninstall gives a similar error, so if you want to have a look via Team Viewer, let me know.

    Events.jpg
     
    Last edited: Oct 10, 2014
  14. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    578
    Location:
    Hengelo
    If you click on the MsiInstaller error details will be shown. Maybe there is something interesting there? Also, have you seen a black flyout from the software radar?
     
  15. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    The flyout appears, but all that does is add the three installed components to the Office template. It does not show as an alert or am I misunderstanding? Also, I have run the install with exploit mitigation disabled and do not see the flyouts, but still get the error.
    Code:
    Product: Microsoft Office Professional Edition 2003 -- Error 1719. The Windows
    Installer Service could not be accessed. This can occur if the Windows Installer
    is not correctly installed. Contact your support personnel for assistance.
     
    Last edited: Oct 10, 2014
  16. Pedersen

    Pedersen Registered Member

    Joined:
    May 4, 2010
    Posts:
    234
    Office package keeps chrashing (powerpoint, word etc.) after installing Alert. Uninstall and everything works again
     
  17. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    578
    Location:
    Hengelo
    What other security software do you have installed? Make sure you do not have EMET 5 or MBAE on the same machine.
     
  18. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    Okay, I ran another Win7 installation without anything installed to reduce the variables as to what is causing the problem. I installed HMPA and then ran the Office install. I used the custom install option and installed only Word, Excel and Powerpoint. I still get the same error. I've run out of ideas. The installation doesn't work when HMPA is active - even when exploit mitigation and security is disabled. I can upload a RAR copy of the Office installer directory I'm using. Let me know if you want it.

    Capture.JPG
    Capture2.JPG
     
    Last edited: Oct 10, 2014
  19. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    A while back I mentioned that I also could not install Office 2007. I need to clarify that a bit. What happened was that I tried to install 2007 after 2003 failed. The problem was that 2007 found 2003 in a suspended state and wanted to remove it. The end result after replying yes was that the 2007 install failed, so I assumed 2007 was also affected by HMPA. This is not the case. If I install 2007 without previously trying to install 2003, everything is okay.

    I know 2003 is EOL but this install problem may also exist somewhere else with other products. What I don't understand is why your Office 2003 installs fine. I am starting to suspect that we are using different installers.

    Capture3.JPG
    Capture4.JPG
     
    Last edited: Oct 11, 2014
  20. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    578
    Location:
    Hengelo
    I think you are not installing on C:\Program Files?
     
  21. wintermd

    wintermd Registered Member

    Joined:
    Mar 25, 2014
    Posts:
    4
    Location:
    Dubai
    Just reporting about BSOD while updating Warthunder. I have had about 3-4 BSODs while playing other games, or doing other things, since installing the latest version of HitmanPro.Alert about 3 days ago (getting SYSTEM_SERVICE_EXCEPTION error). I have attached the minidump (I just appended a .txt extension to be able to upload the minidump file -- just delete the .txt extension). I hope the minidump helps in figuring out what's causing the BSOD.

    Using hitmanpro.alert 3.0.15 build 92 ctp 4 with trial license. Other security software running are Bitdefender Internet Security 2014 and WinPatrol. Using Win 8.1 64 bit.
     

    Attached Files:

  22. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    Keystroke encryption in protected applications is not working at all in CTP4 build 92 for me. It's working neither in IE11, Chrome 38 nor FF.
     
  23. Pedersen

    Pedersen Registered Member

    Joined:
    May 4, 2010
    Posts:
    234
    Only got SecureAPlus installed besides Alert
     
  24. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    I think I am installing there. I see you too are running out of ideas. :( I don't think I'm doing anything unusual and I've pretty much narrowed it down to HMPA. I've offered to send you my installation files and I've offered to do a Team Viewer session so you can convince yourself of the problem. You can even pick which OS you want to use. :D I don't know what else I can do to help. I know you are busy and I myself would consider this as low priority compared to BSODs etc. so don't feel obligated to drop more important things for this, but please keep it on the plate.

    BTW, my installation files include SP3 and all Office 2003 fixes up to the last Patch Tuesday before the product went EOL. You are probably just installing the vanilla version no?
    Capture5.JPG
     
    Last edited: Oct 11, 2014
  25. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,499
    Okay, it is as I suspected. You are using older Office 2003 installation files. I took an MSDN iso version of Office 2003 Professional without adding SP3 or any fixes and that installs fine. My updated RAR file is about 290MB. Do you want it?
    Capture6.JPG
     
    Last edited: Oct 11, 2014
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.