Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.
peter, do you also use the "firefox 38.0.5" browser?
Yes, I do.
i did some testing.. i disabled the "regdefend" and "system safety monitor" programs.. that didn't see to make a difference..
when i say i disabled the programs, i used sysinternals "autoruns" to disable the programs' drivers and services, so they were completely disabled..
then i tried running "firefox" in "safe mode".. at first that didn't seem to make a difference.. then i tried something else.. i keep the folder for my screenshots in my "program files" folder.. i tried going to my "my documents" folder, instead, to attach a file from there, and it worked!
i re-enabled the "regdefend" and "system safety monitor" programs and rebooted, then tested again, with firefox running in normal mode, and tried attaching a file from my "my documents" folder, but it didn't work.. then i tried again, with "firefox" running in "safe mode", and it worked! so:
if i try to attach a file from my "my documents" folder, and if "firefox" is running in "safe mode", it works..
if i try to attach a file from my "program files" folder, it doesn't work..
if "firefox" isn't running in "safe mode", it doesn't work..
so there seems to be an issue with the "addons" that i am using.. i tried disabling several of them, one by one, but that didn't make a difference.. i will have to do more testing to see if a particular addon is causing a problem, or it could be a combination of the addons.. i didn't want to continue with the testing, for now..
peter, you seem to have been right, the problem seems to be with the "settings" (firefox addons) that i am using on my computer, considering that i can attach a file when "firefox" is running in "safe mode".. that, plus i kept my screenshots in my "program files" folder, which was another problem..
here is a list of the "addons" that i have installed:
Classic Theme Restorer
Element Hiding Helper for Adblock Plus
Empty Cache Button
Hide Tab Bar With One Tab
Hmm. Try dumping the Adblock Plus stuff. I've used it for years, but recently I've had all kinds of squirrelly Firefox problems. I finally nailed it down to Adblock Plus. Dropped it and replaced it with Ublock and have the same blocking minus the problems. Also NoScript could be another source. It's every effective and I've never gotten comfortable with it.
How do I deactivate a license key?
I am a reseller and there are times I want to deactivate a license key. Example: I accidentally activate a key that was already activated on another customer. Now I need to deactivate the key and activate the correct key. Another example. I accidentally activate a 1 pc key for a customer and oops, I was supposed to activate a 3 pc key for that customer, now I must change it. See what I mean? There are legitimate reasons to change the key,even minutes after activation. Please add a deactivate button like Malwarebytes has.
Until then please tell me now how to manually deactivate a key.
i spoke too soon.. i did some more testing and found that i still get the HMPA-ROP-alerts when running "firefox" in "safe mode", when i am trying to attach a file to a post..
in my testing, with "firefox" running in "safe mode", i did manage to attach one file to a post without getting a ROP-alert, but i got the ROP-alert every other time that i tried attaching a file to a post..
i also tried disabling a couple more of the addons that i use, but i didn't find that that made a difference..
i don't think that any of the firefox-addons that i am using are causing a problem..
i think the problem has to do with "browsing" for the file to attach to a post.. when you click the "attach" button, to attach a file to a post, a window opens that allows you to browse for the file to attach.. i get the ROP-alerts when i am browsing from folder to folder to get to the file that i want to attach to a post.. and the problem, related to browsing for files to attach to a post, probably is somehow related to my using "sandboxie"..
hopefully one day surfright will look into this issue and be able to tweak things in HMPA so that i won't continue to get the HMPA-ROP-alerts when browsing for a file to attach to a post..
i am using "windows xpsp3" and "firefox 38.0.5", and "sandboxie build 4.18"..
You might try Sandboxie 4.19.3 and see if that helps.
i did some more testing, just now.. i tried disabling "regdefend" and "system safety monitor", again, completely disabling the programs' drivers and services, so that they were completely disabled.. (of course i had to reboot the computer so that the drivers wouldn't be loaded).. i also was running "firefox" in "safe mode" so that no "addons" would be loaded..
when i tried to attach a file to a post, it looked like it was going to work: i managed to "browse" to a folder where i then could select a JPG-file to attach to a post, without getting a HMPA-ROP-alert.. however, for testing, instead of attaching the JPG-file, which apparently was going to work, i tried to browse to another folder, instead, and, when i did, i got a HMPA-ROP-alert..
i am just trying to let surfright know about this issue so that maybe they can tweak things, so that i won't continue getting the ROP-alerts when i try to attach a file to a post, when using "firefox" with "sandboxie"..
or..maybe surfright will say that i need to disable one of HMPA's mitigations, for "firefox"..
as i said before, i also get HMPA-ROP-alerts when i simply try to open IE 6, if i try to open IE 6 and it is running within "sandboxie"..
On www.surfright.nl/en/downloads/ Hitmanpro.alert 184.108.40.206 is mentioned, however build 190 is what you get if you download.
Noticed Keystroke Encrypting mia in Firefox. First thought. Oh well.
Then noticed Alert was mia.
Stop n' Start Service = HMP.A 191 appears normal.
Another strange thing.. You can't disable the keystroke encryption... I disabled it but it still pops up in the browser and shows the encryption animation...
Also Vol + and Vol - are beeing encrypted then decrpyted as "b" and "c" which is really annoying as it starts typing while browsing..
Yeah, I noticed f2 f3 and f6 > f11 react but, they're keystrokes too ..
Try closing browser. Disable...
batch installed a bunch of games in steam and now hitman alert shows me CryptoGuard, you can even test it your self by holding ctrl and click on the games you want to batch install.
I think it shows it self when you use a fast SSD/computer and install 10 games in succession or as a batch install
when steam decrypts the files it will tip off hitman alert
i have had no problems with hitman alert until now
i am not seeing that problem, on my computer..
are you sure that you disabled the keystroke-encryption in the right way, in the "risk reduction"-settings?
did you restart your browser after changing HMPA's settings? maybe you need to restart your browser before you will see the changes in HMPA's settings take effect..
have you rebooted your computer, after installing HMPA? if not, try rebooting your computer, to ensure that HMPA is running properly..
That's not a problem, but HMPA doing it's job. I was playing with Axcrypt the other day. If I encrypt one file no issue, but if I highlight more then one and encrypt HMPA says no no and shuts it down. That is good. It says the crypto stuff is working.
Your signature is not accurate, because HitmanPro 3.7.9 Build 242 with Kickstart 2.3 - Download correctly HitmanPro 3.7.9 Build 241 with Kickstart 2.3 - Download
This thread is for Hitman Pro Alert. Hitman Pro has its own dedicated thread Here:
Tried to duplicate with Glary Utilities Encryption. 4 items encrypted...maybe Glary is faux ...?
Download Axcrypt (it's free, and highly recommended) and try it with that.
That is a known issue that I have already mentioned back in April. --> https://www.wilderssecurity.com/thre...iscussion-thread.324841/page-190#post-2475952
I don't consider it an "issue". I consider it protection.
Yes, I believe CryptoGuard focuses on blocking the encryption process, not on identifying the application. You just have to turn it off manually when you want to use encryption software.
I know, but also flawed: HitmanPro.Alert 3.0.41 Build 190 with CryptoGuard - Download, 3.041 ==> 3.042
How do I get HMPA3 to work with Sandboxie?
I'm trying HMPA for the first time on an XP machine along with Firefox. Firefox works fine with HMPA without Sandboxie, but I can't seem to get it to work with SBIE. It looks like it attempts to launch, but then (within a second or two) it just unloads and closes again.
After clicking the Sandboxie browser icon, the SBIE system tray shield briefly fills with red dots, then the dots disappear and a red X appears, then it goes solid yellow again -- without opening the browser.
Tom you might add here that the appropriate line is in the Sandboxie config or that's the solution you will get.
Separate names with a comma.