HitmanPro.ALERT Support and Discussion Thread

Yes, it is signed by "VideoLAN".
F disk is RAMdisk and I use internal updater in v2.2.3.
When I download v2.2.4 installer from official site and update through it, no alerts are shown.

 

It would be nice to at least receive a reply to the requested PM.

Apparently SurfRight / Sophos have enough beta testers.

 

im sure his inbox is filled with hundreds requests.

 

No we do not have enough beta testers but we are very busy with lots of things. We have way more to do now we are part of Sophos and we do not only develop and support HitmanPro and HitmanPro.Alert. With the same team (8 people) we now also create and support the Sophos branded version of HitmanPro. We also build important core pieces for the new Sophos endpoint, which has gone into closed beta at a couple of large companies. In addition to that we've created and support the framework of the new Sophos UI for Windows, as well as built new QA / testing tools, write documentation, have many meetings (that we did not have before either), reply to all the email that we receive from our 2,000+ new colleagues while also keep track of new malware and exploit developments. On top of that, we need to spend some time with the family too. We're not ignoring you, no worries, just a bit busy

 

All requests have been fullfilled in terms of the beta.

 

Um, not sure what that means... No more beta seats, maybe?

 

Thanks Mark! Fair enough, I can certainly understand that.

 

People on this forum should think themselves lucky that they have access to the developers in the first place.

 

That too is fair enough, but I'm not going to beg ANY developer to test their program for them. I may offer to test at my leisure... or not.

 

Yes, which we highly appreciate!! We can't find a PM from you though, I'll send you the link in a moment nonetheless. Thanks!

 

Thank you Sir.

Message received!

 

I am unable to PM you for whatever reason; most likely due to my post count. If you will accept my request for a link to the private beta here I would appreciate it very much. Thanks!
-nola

 

Mitigation Lockdown

Platform 6.1.7601/x86 06_2a
PID 2348
Application C:\Users\Emil\AppData\Local\Temp\pdfelement_full1042.exe
Description Wondershare PDFelement Setup 5.8.2

Filename C:\Users\Emil\AppData\Local\Temp\pdfelement_full1042.exe
Created By C:\Program Files\Wondershare\PDFEditor\PDFelement.exe


Process Trace
1 C:\Users\Emil\AppData\Local\Temp\pdfelement_full1042.exe [2348]
"C:\Users\Emil\AppData\Local\Temp\pdfelement_full1042.exe" /SILENT -RegCode /LiveUpdate /DIR="C:\Program Files\Wondershare\PDFEditor" /LANG=ENG
2 C:\Program Files\Wondershare\PDFEditor\PDFelement.exe [456]
3 C:\Program Files\Listary\Listary.exe [5296]
4 C:\Windows\explorer.exe [404]
5 C:\Windows\System32\userinit.exe [1976]

 

You don't have enough posts to be allowed to PM anyone.

 

Build 373 working great on Vista HP SP2 x64 and Windows 7 HP SP1 x64.

 

now beta works on my machine very well Super product

 

Sounds like exciting stuff.

 

Hi, I've been getting what I think may be false positives lately. I got a notice saying Attack Intercepted when trying to update Notepad++, another Attack Intercepted for the Firefox Plugin Container (I don't install add-ons) and just now I got another Attack Intercepted when trying to uninstall VLC Media Player.

Mitigation Lockdown

Platform 10.0.10586/x64 06_5e
PID 5176
Application C:\Windows\explorer.exe
Description Windows Explorer 10

Filename C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Created By C:\Users\###\AppData\Local\Temp\vlc-2.2.4-win32.exe

Command line:
"C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe"​

 

Have you added explorer.exe to Lockdown?

 

No, when I tried to uninstall VLC after removing HMPA, ESET HIPS gave a warning that said Au_.exe is trying to access registry, something called DVDVlc or something.

Could it be VLC? I ran a scan with HMP and ESET but it turned up clean. Is Au_.exe a virus?

 

A question about keystroke encryption:
Will it provide protection even if a website, itself, is malicious (i.e. a phishing site)? What if I enter my personal credentials there, will it not be taken by the malicious website because my keystroke is encrypted?

 

4 days ago purchased hitman pro alert and now i want to try new beta.
i cant send any pm.
how can i get new beta link.
thanks for helping

 

Thank you for the info!

 

Au_.exe is part of the Nullsoft Installer System (NSIS). If you deinstall VLC, this file is executed. That's normal.
Location of the file (example): ...\AppData\Local\Temp\~nsu.tmp\Au_.exe