Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.
This will be addressed in the next minor update. Already tucked into our Source Control system.
Can you share the bat file you are using? Send it via PM or email firstname.lastname@example.org.
Well but if you don't inject the hitman pro .dll to its process, then it shouldn't crash, right?
So maybe the easiest way is to add a new option where you can add Programs to a exceptions List, which are not supposed to be affected by Hitman Pro in any way?
Edit: So simply renaming the hmpalert.dll in the system32 folder fixes the crashing problem.
It is probably a protection measurement of the game to prevent hacks from injecting dlls into it.
So i would stick to the request to add an exception list for programs which are fully excluded from Hitman Pro Alerts protection.
That is an option but we like to keep thing tight in order to not let anything slip onto the computer through an exclude.
Second time now HMPA is giving a false positive in Steam. Now it's a game I want to launch.
RC 120, Win 8 x64
Platform 6.3.9600/x64 06_3c
Description Steam Client Bootstrapper 1.0
Filename C:\Games\Steam\steamapps\common\Team Fortress 2\hl2.exe
"C:\Games\Steam\steamapps\common\Team Fortress 2\hl2.exe" -steam -game tf
This is not so much a false positive but actually an inappropriate setting. The manual hasn't been finished so you couldn't know, but I suspect you manually added Steam.exe to Alert and it's not stored under the Browser profile, right?
If you need to protect Steam (which is basically a game browser/downloader/launcher), I'd recommend to add it to the Browser category which behaves differently. This should help. Let us know if it doesn't.
Thanks! That did the trick!
As per my previous post https://www.wilderssecurity.com/thre...iscussion-thread.324841/page-105#post-2422650
HMP.A really does not like PotPlayer. I have installed HMP.A RC over the previous version, and the problem in my previous post persists. Now, from time to time, I also get this screenshot
Update: The Firefox not opening, yet running in Task Manager, has happened again. Disabled MBAE for now to see if the problem persists.
I have steam under the other category, and apparently it doesn't know it should be there. It's working.
I did have one strange false positive today.
I have Acrobat Pro X11, and it updated today. On my desktop A the update went without incident. On Desktop B, as the install was progressing, HMPA shut it down with an alert. Grrr I rebooted and the update restarted and this time went fine.
This is the same issue as this post: https://www.wilderssecurity.com/thre...iscussion-thread.324841/page-121#post-2435463
Okay. Let me know if I can do anything.
Sent email with bat file. Thanks.
Happy to report that iTunes did no longer crash (this did happen with several CTP releases) after it crashed the first time I started it with HMA active.
In fact, I completely forgot that problem and updated several iOS devices to iOS 8.1.2 today.
(So I'm really happy that there were no crashes during those firmware updates!)
Oh, one bug on my system: the reported "Scan completed" time seems to be the time the scan before the last one completed?
(if I run a scan once a day, the last scan is reported as "24 hours ago" when I just completed a scan)
I always get the alert below when launching a file that has had changes made to it prior to it being run. I.e. create a .txt file with some text. Launch the txt file from my Win32 console Filemanager application and it gets intercepted. If I launch a different .txt file that hasn't been changed there is no alert. Hard to understand what is going on. The alerts happen on all types of files such as .doc, .zip etc. where the modified timestamp of the file is very recent.
I tried adding FM.exe to the test mitigation template and unchecked lockdown, but that did not help after FM was restarted.
Also launched from Fileman
I keep getting this FP when trying to watch anything on netflix in firefox 35 beta
It is starting to look a lot like the free version of MBAE is incompatible with HMP.A 3 RC. After disabling MBAE I have not been able to reproduce FF not opening.
Erik, if you can reproduce and find the cause if and when you can make time it will be greatly appreciated.
I have to ask why if you are running HMP3 RC, why do you worry about MBAE? I don't think you need both of them.
That is a good question Peter, but since there will be a free version of HMP.A which does not include exploit mitigations I would like to use the free version of MBAE to help protect my browsers.
Strike that! It's just happened again while MBAE was disabled.
Erik, any other suggestions?
MBAE uninstalled, HMP.A Mitigations + Active Vaccination enabled.
Windows Media Player blocked - ROP Alert.
Its possible to update Acrobat Reader XI via: http://get.adobe.com/reader/?promoid=HRZAC
Edit: untick OPTIONAL OFFER (or not)
Fad said: ↑
I have just realised the latest Alert is causing stalling and slowdown when uploading files to a NAS drive when using FileZilla.
With the Alert service fully disabled all is fine and FileZilla uploads at full speed, with Alert enabled the file starts uploading normally then slows down dramatically sometimes stalling completely -
with the Alert service running but all options set to OFF, the same slow down occurs.
Unfortunately, this hasn`t been resolved fully for some reason as it is still occurring here at least when using Alert v3.0.20 Buid 120 RC
If this problem is regarded as being totally fixed - is it unlikely to be looked into again ?
(Testing an alternative program had the same results)