HitmanPro.ALERT Support and Discussion Thread

I didn't want to complain about false positives during beta phase,
but point out that I encountered no attack, during this time.

I'm running WIN7-32-home on Pentium-dual-core cpu.
Microsoft Security-Essentials and Malwarebytes Anti-Malware premium, no other related software.

Cherry compact-keyboard G84-4100, with driver provided by Microsoft. V6.1.7601.18199 from 21.06.2006.
There is no newer driver available.
(It's not an option to use a full sized keyboard, because of very limited space on my desk.)

The keyboard worked fine, until I upgraded from build 179 to 181.
Can't get the keyboard to work, even if I downgarde to build 179.

There must be a way to reset keyboard history, to let HMP.Alert detect the keyboard again!

Is this confidential?,
or is there an uninstaller, that really removes all traces?

hmpalert3.exe /uninstall does not.
It leaves the keyboard nonfunctional, after reinstall, and leaves the license information...

 

HMPA is causing Silverlight to crash. Get a warning like "HMPA is closing your FireFox Browser Plug In Container to prevent execution of malicious code. Then see that "plug In container with Silverlight has crashed. -HMP scan shows nothing:

Mitigation DEP

Platform 6.3.9600/x64 06_3c
PID 7956
Application C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Description Plugin Container for Firefox 37.0.1

IP = 04FE0020, State = 0x1000, Type = 0x20000, Protect = 0x4

Stack Trace
# Address Module Location
-- -------- ------------------------ ----------------------------------------
1 57508C27 agcore.dll DrmException_GetErrorDataFromHResult
5e POP ESI
5d POP EBP
c20800 RET 0x8

2 576583A5 agcore.dll DrmLicense_IsUsable
3 57657179 agcore.dll DrmLicense_IsUsable
4 57657BF7 agcore.dll DrmLicense_IsUsable
5 576A2428 agcore.dll DrmLicense_IsUsable
6 576A2783 agcore.dll DrmLicense_IsUsable
7 57695786 agcore.dll DrmLicense_IsUsable
8 57695B78 agcore.dll DrmLicense_IsUsable
9 576B03C4 agcore.dll DrmLicense_IsUsable
10 576A6460 agcore.dll DrmLicense_IsUsable

So do I uninstall HMPA or stop watching NetFlix?? New Marvel Daredevil series looks good. Has crashed twice.

 

Uninstalled for now -need to see how Daredevil Episode ends. Will reinstall later and see what happens using IE instead of FF.

I do have issues sometimes with my FF plug-ins.

For example. I can not use Flash with Fire Fox. Have no idea why.

Any page with a flash object will freeze my FF requiring task manager to close it.

 

Maybe some help here: https://support.mozilla.org/en-US/k...ems#w_playing-flash-videos-makes-firefox-hang

 

Nice to see Hitmanpro.Alert finally get upgraded to version 3!

Looking at the info on the main site, it seems to me that Surfright made Hitmanpro.alert 3 a lot like EMET now. Right now, I have both EMET 5.2 and Hitmanpro.alert 2.6.5.77 installed on my PC without any conflict. But if I want to install the new version of Hitmanpro.alert, will I have to uninstall EMET? Are there any issues having EMET 5.2 and Hitmanpro.alert 3 on the same computer?

I'm sorry if this was already answered in this thread but I don't have time to pore through 10+ pages of responses.

 

https://www.wilderssecurity.com/thr...iscussion-thread.324841/page-189#post-2475730

 

HitmanPro.Alert 3 build 180 General Availability
HitmanPro.Alert 3 is not compatible with the Microsoft Enhanced Mitigation Experience Toolkit (EMET) version 5.2. As workaround you can disable EAF and EAF+ in EMET 5.2. HitmanPro.Alert is fully compatible with EMET 4.1 and EMET 5.1.

 

Surfright team has a really good eye for design. Visually, this is quite elegant and appealing. Gotta give credit where credit is due.

 

Are you referring to the message saying that 181 wouldn't install after reboot? If so I would uninstall and try a clean install of 181.

 

Thanks for the reply. I'll probably uninstall or disable EAF and EAF+ in EMET 5.2 for the time being.

I'm thinking of going with the free version of HMPA. If I uninstall EMET 5.2, what features of EMET 5.2 will I lose if I install the free version of HMPA?
The most important feature that I like about EMET is being able to apply individual anti-exploit measures to each program.

To me, it seems only the pay version of HMPA will have this feature.

Note: Sorry if this already been answered in this thread.

 

One more question! Sorry if this sounds like a dumb question but...

Can I install the new version of HMPA over the old 2.6.5.77 version?
Or should I first uninstall the 2.6.5.77 version?

 

Yes, (edit: well maybe. I have had three upgrades fail, the service won't start. I would uninstall first)

 

Since, you're thinking free ~ have you seen this comparison chart #4097 Last edited: Feb 19, 2015

 

Can't agree more about the need to protect browsers from all of the crapware out there. Pehaps HMPA can be expanded to do what you're describing in the future. Note there's at least one mainstream AV with a scanner module specifically for removing dubious browser addons/plugins.

 

Does HMPA make any changes to network settings, or internet settings?

 

It does disable teredo tunneling pseudo-interface in Device Manager.

https://www.wilderssecurity.com/thr...iscussion-thread.324841/page-199#post-2478954

 

Thank you!

 

Erik, does it make any other changes to network, or internet settings?

 

Is possible to know what is the "Full 64-bit Support" of HPA3 compared (if possible) with EMET?

EMET no support 64-bit "list applications":

ROP Mitigations

a) CALLER
b) SimExecFlow

_____________________

d) SEHOP

TH.

 

Thank you for these suggestions. We will consider these for future build.

 

I've got the same problem as hawki. For the last few builds I've got Severe Silverlight problems due to Hitman Pro Alert.


Mitigation DEP

Platform 6.1.7601/x64 06_3a
PID 5444
Application C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Description Plugin Container for Firefox 38

IP = 050B0020, State = 0x1000, Type = 0x20000, Protect = 0x4

Stack Trace
# Address Module Location
-- -------- ------------------------ ----------------------------------------
1 5B5D8C27 agcore.dll DrmException_GetErrorDataFromHResult
5e POP ESI
5d POP EBP
c20800 RET 0x8

2 5B728365 agcore.dll DrmLicense_IsUsable
3 5B727139 agcore.dll DrmLicense_IsUsable
4 5B727BB7 agcore.dll DrmLicense_IsUsable
5 5B7723E8 agcore.dll DrmLicense_IsUsable
6 5B772743 agcore.dll DrmLicense_IsUsable
7 5B765746 agcore.dll DrmLicense_IsUsable
8 5B765B38 agcore.dll DrmLicense_IsUsable
9 5B78037C agcore.dll DrmLicense_IsUsable
10 5B776420 agcore.dll DrmLicense_IsUsable



Faulting application name: hmpalert.exe, version: 3.0.36.181, time stamp: 0x552537b2
Faulting module name: hmpalert.exe, version: 3.0.36.181, time stamp: 0x552537b2
Exception code: 0xc0000417
Fault offset: 0x001f10c8
Faulting process id: 0x12b0
Faulting application start time: 0x01d0748ec053ef03
Faulting application path: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
Faulting module path: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
Report Id: 94dd7bce-e083-11e4-b4b4-6805ca1a7eee


Thanks

 

What site are you visiting to trigger this alert?

 

Alert does not keep record of keyboards. It does keep the license on the computer as it is also used by the HitmanPro Anti-Malware scanner.

The /uninstall should uninstall Alert from the machine. If your reboot, do you see flyouts or Alert in the tray area?

 

I know how to install manually, but I wanted to do it with HMPro Alert automatically. Thanks anyway Victek

 

During Facebook session, I got an alert and Chrome reported Shockwave Flash crashed.