HitmanPro.ALERT Support and Discussion Thread

Win-7 Prof x64 + CIS + EMET + Zemana AL:

Dragon, Uran, IE, FF go smooth.

 

And not only 2.6.x users, but 2.5.6.64 users as well, so I noticed.
Which is fine, but rather unexpected, as I thought 2.5.x would be updated when the stable version is issued, not with the release candidate.
Anyhow, it's fine, but unexpected.

 

HitmanPro.Alert 2.6.3 build 74

This is the stable release.

Changelog (compared to build 73)

• IMPROVED: Minor improvement to CryptoGuard filter driver

This build was released a few days ago. All 2.5 and 2.6 users are automatically updated.

A new crypto ransomware variant has popped up, called CryptoDefense.
More info on CryptoDefense can be read here: http://www.bleepingcomputer.com/for...e-newest-cryptolocker-variant-details-inside/

Alert 2.6.3.x provides protection against this new crypto ransomware variant for both workstations and servers (file shares).

 

Ah, I see, 2.6.3.73 was the release candidate, 2.6.3.74 is the stable release.
Thank you very much.

Nice, thank you very much!

 

Is there any current known compatibility problem with WSA? I have tried the last few releases of 2.5/2.6 and don't see any flyout with either Firefox or Chrome. If I disable WSA or change the WSA identity protection setting (Alert is already whitelisted OK) from 'protect' to 'allow' for the browsers then the flyout works fine.

 

I think you need to contact Webroot as that sounds like an issue on their side.

 

By the way,
you meant to say HitmanPro.Alert, of course.

 

Yes, changed it

 

Thanks for posting this. I've been trying to figure out for a while why I wasn't getting the "flyout" with Firefox and Opera. Might be worth discussing in the Prevx forum.

 

Erik,

Any plans to improve compatibility with Norton?

 

So I thought I'd try again.

Failed to install, error 0

System would not shut down and a forced shutdown was required.

Norton 360v21.2

Windows 7 x64 SP1

HMPA 2.5 used to work fine but since 2.6 it will not work on my systems.

 

I've run Norton and it works flawless. The error 0 is weird though. Maybe I can have a remote look to see whats going on? Please PM me if you are up to it.

 

I have sent you a PM.

 

Same installerror (0) with W7 64 bits and latest NIS, laptop wont shut down. After forces restart hmpalert works as it should be (two W7 64 bits laptops have this problem).

With Vista 32 bits and latest NIS no problems.

 

Erik,
Thanks for youre time. My system would not shut down. I have sent you a PM.

 

I just had a look at Krusty13's machine. Install went fine (no error), but on reboot his system hung as well.

I have a VM session with Norton 360 21.1.0.18 (trial) and that shuts down just fine with Alert (tried several times).

I am a bit in the dark on how to proceed in solving this issue. Maybe, other software combined with Norton causes the issue with Alert? Or perhaps a Norton setting? Something set to Aggressive?

 

The only setting I have changed to "Aggressive" is Boot Time Protection. Other wise my settings are pretty much in their default state.

Thanks!

 

No other securityprograms. I use Norton Internet Security version 21.1.1.7 (latest version). Boot Time Protection = Aggressive.

See: http://community.norton.com/t5/Prod...ton-Internet-Security-Norton-360/ba-p/1095883

 

HitmanPro.Alert 2.6.3 build 74

First version that runs on Win8 32-bit. Thanks for fixing this.

Al

 

Actually, see this post for the latest version - http://community.norton.com/t5/Prod...ton-Internet-Security-Norton-360/ba-p/1107654

 

Haha nice one Krusty. No new update yet here via Liveupdate.

"2. When will I receive the patch?

As is our standard practice, we are deploying the patch in a phased manner. We have released the patch to randomly selected customers, and will then monitor our telemetry, as well as this forum, for any problems or issues. Once we have confirmed the effectiveness of the patch, we will make it available to all customers. We will post an update on the Norton Community Forums when we make the patch available to all customers.

3. How can I manually install these patches?

Unfortunately, this patch is only available via LiveUpdate, and is being released in a phased manner. It is not available for manual download & install at this time."

 

@deugniet, Krusty: can you run fltmc.exe filters from an administrative command line? I'm beginning to think that issue might be related to filter driver.

 

You need this Erik?

http://s17.postimg.org/4qtoqkqtb/fltmc.jpg

 

Maybe this causes the NIS-HmP.Alertproblem?

I use a legal version of NIS btw... And this doesn't occur with the W7 64 bits-version of Hitmanpro.

Code:

HitmanPro 3.7.9.213
www.hitmanpro.com

   Computer name . . . . : xxxx
   Windows . . . . . . . : 6.0.2.6002.X86/4
   User name . . . . . . : xxxx
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2014-03-22 15:47:46
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 2m 37s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 1

   Objects scanned . . . : 2.007.824
   Files scanned . . . . : 12.237
   Remnants scanned  . . : 206.675 files / 1.788.912 keys

Suspicious files ____________________________________________________________

   C:\Windows\system32\drivers\NIS\1502000.026\symelam.sys
      Size . . . . . . . : 21.520 bytes
      Age  . . . . . . . : 3.9 days (2014-03-18 19:04:16)
      Entropy  . . . . . : 6.5
      SHA-256  . . . . . : 365C945ECB485455E113A4CD6B429311C29AC2D94393CEB78940C401F93D54F8
      Product  . . . . . : SymELAM
      Publisher  . . . . : Symantec Corporation
      Description  . . . : Symantec ELAM
      Version  . . . . . : 1.0.0.111
      Copyright  . . . . : Copyright (c) 2012 Symantec Corporation
      RSA Key Size . . . : 2048
      Authenticode . . . : Invalid
      Fuzzy  . . . . . . : 22.0
         Program is altered or corrupted since it was code signed by its author. This is typical for malware and pirated software.
         Time indicates that the file appeared recently on this computer.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.

 

Yep that is it. Are you now running Alert properly (I see it in the output) or did you install it just for the screenshot?