Discussion in 'other anti-malware software' started by erikloman, May 25, 2012.
I don't know how to find out without uninstalling Alert or Norton.
I have added Windows Media Center to my report.
I had overlooked that application earlier, somehow.
A scan of FF 46 showed nothing, bit HMPA shuts down FF 46 because of "attack by malicious code."
Win 8.1 64x
Well, 45.0.2-x64 was okay. Then upon FF46 update. Firefox wheels went wobbly.
I'm on FF45.0.2-32bit....for now.
I believe Alert is related to sloooow FF. I've just uninstalled Alert, restarted, and FF speed is back to normal.
In my case, nothing really special, I think.
See details as specified in my signature.
No applications or mitigations manually added in HMP.A, only applications and mitigations as HMP.A added by default.
So it was quite the surprise to me that several applications show as "not protected" in Running applications.
Reinstalled Alert and FF is slooooow again. I'm using Cyberfox 45.0.3 x64 now and its running fine but have just been prompted to update it too.
Edit: Updated Cyberfox to 46 and it also appears to be running very slow.
Have scanned with HitMan Pro, EMIS 11. Watchdog Antimalware Premium (aka Zemana Antimalware Premium) they all show nothing but HMPA blocks operation of FireFox 46 32x on my Win 8.1 PC. Have disabled all components of HMPA except risk reduction. I'll take my chances until further notice from ericloman.
made a restore point, installed firefox 46 and did some testing....
Didn't notice slow speed, but my XEON-Office machine isn't good for testing speed.
Noticed occasionally crashes, maybe related to HMP.A, but not confirmed...
Uninstalled Firefox, as I don't want to use it, and restored OS.
The Brother will fix this, no doubt.
Off topic and just for your info:
Tomorrow ( 27 April 2016 ) it is "King's Day" in The Netherlands. It is a national holiday; many companies and organisations are closed.
Of course I cannot and will not speak for SurfRight, but anyways I thought I'd let you know.
(And there will be more special days in the weeks coming; it is that time of the year)
I've not had any issues recently until Firefox auto-updated itself to 46.0 (32-bit) from 45.0.2 and then at first it kept crashing every time I opened the browser, so I tried to disable all mitigations in HMP.A (b364) and it now opens, but VERY slowly indeed and uses at least 30% CPU compared to maybe 5% previously.
There is seemingly something in Firefox 46.0 (32-bit) that doesn't like HMP.A and makes it crash/run very slowly.
I'm running W8.1 (64-bit) with NOD32 antivirus.
Can you verify whether hmpalert.dll is injected in the process? Use Process Explorer to see if the DLL is listed.
HitmanPro.Alert 3.1.9 Build 368 Released
Improved compatibility with Firefox 46.
Improved SysCall mitigation (part of Control-Flow Integrity) on Windows 10 Redstone.
Improved Colored Window Border.
Improved hardware-assisted ROP mitigation performance.
Please let us know how this version runs on your computer
Yes, Firefox is running much better now, Mark.
W7-x64 with hmp.alert build 368:
The issue with FF46.0 seems to be solved indeed.
Editted: the 'NOT PROTECTED' still exists running with only the default applications added by HMP.alert itself, nothing added manual by me!
(Irfanview is not added to hmpa but used to capture the image)
After updating to FF 46 x64 (Win 8.1 x64), it was unbearably slow, but no crashes as reported above. I did image restore back to FF 45.0.2 and speed was OK again.
After reading above, it seems HMPA (367) and FF 46 did not like one another.
Will test 368 with FF 46, but will image first. @Krusty13 gives me confidence
Will report back.
Using Process Explorer (for the first time!): I do not see hmpalert.dll listed.
Firefox 46 64bit on Windows 10 Pro 64bit is now running at a lower CPU usage.
FF 46 has a new scripting engine which performs MASSIVE amount of allocations of executable heap memory. We ported back an improvement from version 3.5 (still in private beta) into 3.1 to solve the slowdown in FF 46.
There should be an hmpalert.dll in both system32 and syswow64. Please check whether they exists, maybe your AV has removed one instance of hmpalert.dll.
Do you know how to check with Process Explorer if a dll has been injected into a process? You need to press CTRL + F and search for hmpalert.dll. The protected application (Firefox or IrfanView, etc.) needs to be running as well.
In Windows 7 64 bit patch KB3146706 prevents the correct operation of HitmanPro.Alert.
(again), no problem to report so far (10 TH2, /overwrite):
what should be shielded...is shielded, boot time is fast, CPU/RAM usage very light, ecc...
By the looks of the KB article it is unlikely that this patch interferes with HMPA. That said, I will try to reproduce.
UPDATE: I can confirm that 64-bit programs no longer get the hmpalert.dll on Windows 7 when KB3146706 is installed. 32-bit programs are unaffected. Expect update later today.
Separate names with a comma.