HitmanPro.ALERT Support and Discussion Thread

Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.

  1. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    434
    I'm working on that. It's my wife's PC, not mine, and it already took some doing for her to come to believe that HMP.A was a trustworthy program.

    Look at the situation from her perspective: HMP.A. is strictly on a trial basis as far as she's concerned. Now this program that's new to her, is asking to delete hundreds of items from her PC. She wants to know that there is a way to bring it all back if something goes wrong.

    In any case, how would posting the scan log help with learning how to un-quarantine items?
     
  2. hjlbx

    hjlbx Guest

    By posting the log, the developer can review it and will tell you if the files can be safely Deleted or should be moved to Quarantine.
     
  3. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    434
    She's unavailable at present, but I highly doubt that she'd agree to publicly post a log of anything that goes on in her computer.

    @erikloman, can we send you the log file privately?
     
  4. hjlbx

    hjlbx Guest

    You can also submit to SurfRight support.
     
  5. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    434
    BTW, I just re-ran the scan to see what the choices for action are. There is no option in the HMP.A results to Quarantine any items; it's either Delete or Ignore, and then "Apply to all."
     
  6. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Sounds like the first thing would be to image her system. That way she is safe. Should be doing that anyway
     
  7. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,008
    Location:
    USA
    When you click the SCAN tile in HitmanPro.Alert (HMP.Alert) it downloads and scans the computer using HitmanPro. HMP.Alert does not have its own scan module. After HitmanPro finishes the scan it shows a list of items in the "Scan results" window. In the bottom left corner of that window is a "Save Log" link.

    Given the number of files detected by HitmanPro on your computer I'm guessing that most, if not all of them are tracking cookies, which are perfectly safe to delete. I just did a scan and HitmanPro found 46 items. They are all tracking cookies and they are referred to as "Traces", not Threats. Hope this helps.
     
  8. hjlbx

    hjlbx Guest

    @erikloman
    @markloman

    With HMP.A installed, I am seeing multiple entries in Windows Action Center > Reliability Monitor - is this somehow related to HMP.A ?

    Microsoft Toredo Tunneling Adapter

    Driver Management concluded the process to install driver nettun.inf_amd64_39a76f4fea741eb0\nettun.inf for Device Instance ID SWD\IP_TUNNEL_VBUS\TEREDO_TUNNEL_DEVICE with the following status: 0x0.
     
  9. davido

    davido Registered Member

    Joined:
    Mar 18, 2015
    Posts:
    12
    Hello,
    my license has reached the maximum number of activations, which are?
    I bought a 2 years 3pcs license on 2014 black friday (280 days left in two of my computers, 0 in another one).
    During this 14 months i have done some changes (ssd for sure), upraded w8.1 to w10 in all 3 machines and made clean installations.
    In Windows 10 at least you can change your ssd without having to buy a new key.
    So no changes allowed?
    I like this software though.
    ciao
    Edit: Problem solved by Support, Thanks.
     
    Last edited: Feb 23, 2016
  10. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Email Support. I am sure they will straighten it all out.
     
  11. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    434
    That's a great idea, thanks!

    I just asked her and, although I know that we've done that for her in the past, she couldn't remember the last time we did it (nor could I). So it's time to make a new image.
     
  12. JEAM

    JEAM Registered Member

    Joined:
    Feb 21, 2015
    Posts:
    434
    You're totally right. They're all traces, and most of those are tracking cookies. Some of them, though, appear to be registry items listed as "coupon bar" and such. Somewhere in this thread (months ago) I remember reporting that I deleted those "coupon bars" and it broke some functionality on my PC, so I hesitate to globally delete that category.

    Based on my own experience with HMP.A, I would have gone ahead and had her delete the cookies, but since I couldn't find a quarantine option I thought I'd run it past folks here first, just in case. Hell hath no fury like a woman whose logins got erased... ;)
     
  13. hjlbx

    hjlbx Guest

    Tracking cookies and registry items explains why there is no option to Quarantine - only an option to Ignore or Delete; there are no files to quarantine.

    However, a Scan result list of 250+ items requires close inspection.
     
  14. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,008
    Location:
    USA
    You might find these pages about cookies useful:

    http://www.tomsguide.com/us/-tracking-cookie-definition,news-17506.html

    http://lifehacker.com/5461114/fact-and-fiction-the-truth-about-browser-cookies

    I fully understand your need to not disturb your wife's computing experience; I am in the same situation :cool: As for login data you might see if your wife is open to learning how to use LastPass which will do a much more reliable job of protecting her website credentials than the browser password manager and cookie stash.
     
  15. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    12,577
    Location:
    The Netherlands
    Yes exactly, behavior based protection always comes in handy. And cool to know that HMPA can easily stop the most popular ransomware variants.
     
  16. hjlbx

    hjlbx Guest

    @erikloman
    @markloman

    HitmanPro.Alert Kickstart fails on W10.

    Been testing against CryptoLocker.

    Kickstarter.exe never executes during modified boot from USB - or - if it does, the console just "flashes" on the screen. In both cases the system eventually just boots to desktop.

    Instead I tried a workaround. I opened a limited admin command prompt and changed to drive D:\. When I attempted to execute Kickstarter.exe, the following Error Message was returned:

    "The environment needed to support the image could not be found."

    Tried on different systems for 5 hours.
     
    Last edited by a moderator: Feb 22, 2016
  17. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    840
    Application-error build 357 (no dmp).

    Logboeknaam: Application
    Bron: Application Error
    Datum: 18-2-2016 13:43:47
    Gebeurtenis-id:1000
    Taakcategorie: (100)
    Niveau: Fout
    Trefwoorden: Klassiek
    Gebruiker: n.v.t.
    Computer: --
    Beschrijving:
    Naam van toepassing met fout: hmpalert.exe, versie: 3.1.7.357, tijdstempel: 0x56b112c0
    Naam van module met fout: hmpalert.exe, versie: 3.1.7.357, tijdstempel: 0x56b112c0
    Uitzonderingscode: 0xc0000409
    Foutmarge: 0x0021e8d5
    Id van proces met fout: 0x310
    Starttijd van toepassing met fout: 0x01d166844d0b4979
    Pad naar toepassing met fout: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
    Pad naar module met fout: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
    Rapport-id: 56e6b32e-f079-4db6-83a3-5b5d7853afdb
    Volledige pakketnaam met fout:
    Relatieve toepassings-id van pakket met fout:
    Gebeurtenis-XML:

    Win10 1511 build 10586.104 x64/Norton Security with Backup v22.5.5.15
     
  18. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    7,658
    Location:
    Among the gum trees
    Minor bug report:

    Sometimes when Chrome (64-bit) has been open for a while I can't type, or the letters I type don't appear on screen, but the Keystroke Encryption indicator shows that Alert is seeing me type. If I disable Keystroke Encryption I can type again and then can re-enable Keystroke Encryption.

    I have only noticed this in Chrome, but on two Win10 x64 machines.

    Thanks.
     
  19. deugniet

    deugniet Registered Member

    Joined:
    Nov 25, 2013
    Posts:
    840
    Logboeknaam: Application
    Bron: Windows Error Reporting
    Datum: 18-2-2016 13:43:48
    Gebeurtenis-id:1001
    Taakcategorie: Geen
    Niveau: Informatie
    Trefwoorden: Klassiek
    Gebruiker: n.v.t.
    Computer: --
    Beschrijving:
    Foutbucket , type 0
    Naam van gebeurtenis: BEX
    Antwoord: Niet beschikbaar
    Id van CAB-bestand: 0

    Handtekening van probleem:
    P1: hmpalert.exe
    P2: 3.1.7.357
    P3: 56b112c0
    P4: hmpalert.exe
    P5: 3.1.7.357
    P6: 56b112c0
    P7: 0021e8d5
    P8: c0000409
    P9: 00000007
    P10:
     
  20. test

    test Registered Member

    Joined:
    Feb 15, 2010
    Posts:
    490
    Location:
    italy
    Last edited: Feb 22, 2016
  21. Now

    Now Registered Member

    Joined:
    Feb 22, 2016
    Posts:
    1
    @erikloman
    Multiple users seem to have problems with alt-tab (program switching) only when "Keystroke encryption" is enabled:
    https://www.wilderssecurity.com/thre...iscussion-thread.324841/page-336#post-2557539
    https://www.wilderssecurity.com/thre...iscussion-thread.324841/page-335#post-2557283

    In my case, when I have two program windows open (of separate programs) and perform an alt-tab to switch between them, then the windows alt-tab screen shows up, but it pauses on that screen without switching, in about 70% of the time. But is doesn't happen for all programs: it happens when switching back/forth to IE, Chrome, Firefox, but I haven't seen it in for example Notepad, Outlook, Excel without those browsers involved.
     
  22. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Booting Windows 10 with Kickstart is not supported. Creating an Kickstart USB stick on Windows 10 is.

    Hope this helps.
     
  23. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    This is caused by Norton injecting into Alert. It happens when Norton updates its Sonar stuff. You'd see in the Event Log that both events happen around the same time. @Krusty13 can confirm.
     
  24. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    We have it in investigation. Please be patient as we work on reproducing and solution.
     
  25. hjlbx

    hjlbx Guest

    Thanks @erikloman.

    So, if I understand correctly, one must create the USB on W10; in other words, if you create the USB on a system using W7 or W8, it will not work on W10 ?

    When I try to do so, I get Error # 5 - Lock.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.