HitmanPro.ALERT Support and Discussion Thread

Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.

  1. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    Thanks very much!
    That confirms my previous report.
    Thanks very much once again!
     
  2. L10090

    L10090 Registered Member

    Joined:
    Feb 13, 2015
    Posts:
    302
    Location:
    Netherlands
    Yes, Notepad, 7-zip and PDF Exchange viewer, show as UNPROTECTED too.
    (I have updated my post #9526)
     
  3. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    Yes, I noticed.
    Thanks very much.
    So I guess now it's up to Erik and/or Mark.
     
  4. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
  5. eddiewood

    eddiewood Registered Member

    Joined:
    Apr 23, 2006
    Posts:
    136
    Bear in mind that I am a new user today so all of this is new to me. The thought never occurred that it SHOULD automatically add "all" applications.

    Both of my Windows 10 Pro 64bit computers show 7-zip 64bit and Notepad as unprotected. As a test I added 7-zip to "other" and after a reboot it shows as protected. So for me, if I add a program it sticks as being protected.

    HitmanPro.Alert 3.1.9 367
     
    Last edited: Apr 26, 2016
  6. eddiewood

    eddiewood Registered Member

    Joined:
    Apr 23, 2006
    Posts:
    136
    On the Firefox issue:

    Windows 10 Pro 64bit desktop is Firefox 46 32bit and disabling DEP gets rid of the crashes. I have no web browsing performance issue.

    Windows 10 Pro 64bit laptop is Firefox 46 64bit no crashes, DEP is enabled. I have no web browsing performance issues.

    HitmanPro.Alert 3.1.9 367
     
  7. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    Thanks very much.
    Is that a Windows 8.1 x86 (32 bit) system?
    L10090's and my systems are Windows 7 x64 systems.
    That may be a clue. It seems some x64 processes are shown as not protected, while x86 (32 bit) processes are shown as protected.

    HMPA running applications.png
     
  8. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    1,131
    Location:
    Baden Germany
    @eddiewood :
    As mentioned several times:
    Packers, like 7-Zip should not be added to mitigations,
    because they do mass file modification and can trigger Crypto-Guard.
     
  9. eddiewood

    eddiewood Registered Member

    Joined:
    Apr 23, 2006
    Posts:
    136
    Mentioned many times except to somebody who has only just installed it today you mean......how am I supposed to know which applications SHOULD be detected automatically by HitmanPro.Alert? Especially when IE wasn't!
     
  10. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    On my systems, only one of the two has 7-Zip installed. And 7-Zip is not added in HMP.A by default.
    Notepad is not added in HMP.A by default, either.
    WordPad, however, is added in HMP.A by default, in "Office". But as I said, HMP.A shows it as not protected. I could try and put it in "Other", but it should be in Office, and it should show as protected.
    I'm waiting for Erik or Mark to have a look at the mentioned issue.
     
  11. eddiewood

    eddiewood Registered Member

    Joined:
    Apr 23, 2006
    Posts:
    136
    Is HitmanPro.Alert a 32bit or 64bit application?

    When viewing the running processes they are marked as 32bit applications. Is this correct for a 64bit computer?
     
  12. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
  13. whitefox

    whitefox Registered Member

    Joined:
    Mar 28, 2016
    Posts:
    5
    When I turn on DEP (Mitigation memory, super buffer stream), Firefox 46 is always crashing !!
     
  14. eddiewood

    eddiewood Registered Member

    Joined:
    Apr 23, 2006
    Posts:
    136
    Yep for 32bit mine does, which is why I said untick it. :)
     
  15. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,872
    Location:
    Outer space
  16. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
  17. Abdallah

    Abdallah Registered Member

    Joined:
    Oct 28, 2013
    Posts:
    124
    Location:
    N/A
    Here I have an issue with my Windows 8.1 Pro 64-bit machine , the keystroke encryption didn't work so I just disabled it and used Keyscrambler untill this fixed

    Abdullah
     
  18. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    I'm getting confused.
    My report showed three x64 processes as not protected.
    But L10090's report also showed Notepad 32 bit as not protected.
    And bjm_'s report showed IE11 x64 and WordPad as protected.

    Have you checked if those mentioned appications are shown as protected or not protected in Running applications?
     
  19. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,872
    Location:
    Outer space
    Hmm strange.
    They're shown as not protected, but if I click on them, all migitations are checked and it asks to restart the process, like your screenshot shows. Restarting them doesn't help btw, and it immediatly asks again for restart.
     
  20. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,857
    Location:
    the Netherlands
    Indeed it is!

    Thanks for the confirmation.
    So it's the same as for the applications for which I reported.
    As I said, it seems to be a riddle for the SurfRight team to solve. I hope it's something that's easy to fix.
     
  21. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,240
    Location:
    Among the gum trees
    Firefox 46 x64 is incredibly slow on my machine now. Cyberfox 45.0.3 is still running well.

    Edit: It is the same on both of my machines. Firefox is no longer usable. :(
     
    Last edited: Apr 26, 2016
  22. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    1,131
    Location:
    Baden Germany
    What the hack are you guys doing with your OS?
    Haven't had any issue with HMP.A for months...
    Did not manually add any mitigations, except Notepad++, and do not have Firefox installed.
    Of course I did not add any packer, or well known nogos. (WMP-Classic)

    I'm running HMP.A on my office machine and 14 WIN7-64 clients.
    There is only one client with repeated updates issues, that maybe caused by exotic software, or OS related reason.
    (this particular machine was moved several times to new hardware...)

    It's all in this thread, how to handle HMP.A, just to long to read......
    Someone should make a tutorial, a WIKI, a howto....
     
    Last edited: Apr 26, 2016
  23. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,077
    Location:
    DC Metro Area
    erikloman !

    HMPA, 3.1.9. build 364 is blocking the start of the just released FireFox 46 as containing malicious malware.

    The download was approved as safe by EMIS 11.
     
  24. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    Is Alert causal to your slooow Firefox46 x64...?
     
  25. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,560
    For me, I'm not experiencing any issue. Firefox 46 x64 runs fine without crashes or slowdown, though I must indicate that firefox currently has no extensions.

    This is on Windows 10 x64 laptop
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.