HitmanPro.ALERT Support and Discussion Thread

Hi erik, have you tested G-Data's and KIS' 2013 Safe banking/Safe money against ZA/Sirefef MITB?
I'm assuming that they don't provide protection against it like Prevx SOL, but it'd be interesting to know for sure, since it could be one more reason to use HMP.Alert instead of the suits' built in mechanisms.

 

Did clean install of Beta 3. Seems to be working fine so far. Scan works. Like Green flag.

 

Just posted a small update: Beta3a.

Solved a false positive and updated the languages.

 

I don't like the green flag, the black one looks more professional.
Or choose a darker green.
But the Dutch translation seems good!
And why does the program sais it's beta 3a?
See above!

When the flyout shows up, in every browser, you can't click on the buttons behind it. Isn't it a good idea to make a ''Close'' button in the right corner of the flyout?

 

I also liked the grey better. But green is more logical (for the average person) and it matches the green color of the HitmanPro application (same style).

We will add an [X] to the top right corner in next build.

 

Yes you're right.
And the X in the right corner sounds like music in my ears!

 

I'm not getting any flyout with Chrome, but I am getting it with Opera and Firefox. Nothing at all in the error log aside from the usual audiodg.exe errors.

Edit: If I turn off SRP then I get the flyout with Chrome.

Edit again: somehow it's now working again in chrome even with SRP turned on. Hmmm...confusing.

 

Will Beta 3 update automatically to 3a or do I need to download again?

 

With Beta3a, the flyout appears only the first time FF or Thunderbird is opened. If you close each one and re-open them again, no flyout appears. It seems that the option for hiding the flyout until the next boot gets enabled even though I did not select this option.

Al

 

@ erikloman

Do you recommend i install this new V, or stick with the high CPU one ?

 

Installed and working smoothly here. CPU is around 0.25%, no problems detected here so far.

 

New x64 Beta installed and working oke.

This is a small part of the log.

OpenProcess 2664 failed with error 5
[3064] C:\Windows\system32\mswsock.dll (245760 bytes)
[3064] C:\Windows\syswow64\SspiCli.dll (393216 bytes)
[3064] C:\Windows\syswow64\WININET.dll (1159168 bytes)
[3064] C:\Windows\syswow64\WS2_32.dll (217088 bytes)
[3064] C:\Windows\syswow64\CRYPT32.dll (1171456 bytes)
[3064] C:\Windows\syswow64\USER32.dll (1048576 bytes)
[3064] C:\Windows\SYSTEM32\ntdll.dll (1740800 bytes)
[3064] C:\Windows\SysWOW64\ntdll.dll (1572864 bytes)

 

I already expected this would occur on your system because you have the lingering hmpalert.exe issue. We must do a remote session asap.

 

Beta 3a is the one to use.

 

It should auto update. But reinstall is quicker.

 

I had this as well. Will fix this in next build.

 

Great, thanks. CPU usage with Chrome has gone from 10% to 0.78%. Good job

 

@ erikloman

What a VAST improvement from the previous version Hardly any CPU now, good job

 

Anyone else getting a message about possible TDSS variant rootkit infection (hard disk stack referencing a hidden driver) after the latest update? I am, and for the life of me I cannot find whatever hidden driver it's talking about; not with GMER nor anything else.

Is this a known FP?

(I'm hoping it is, but on the other hand several malware removal tools have mysteriously failed on me... So I don't consider it out of the realm of possibility that the computer in question is compromised.)

 

Using the Beta 3a:

 

You are using Avast? Should not trigger the alert though as no lines are red.

 

Are you running with EWS? You are very likely infected because the TDSS message is very specific about the way the device-stack is mangled. In any case you should see also an infected driver / MBR. You could run TDSSKiller to confirm the infection.

Btw. You are posting in the wrong thread. This thread is about HitmanPro.Alert.

 

Before I received this alert:


I'm using Win 7, Opera 12 and lastest avast! Free...

If you need more info...

 

You are using an old build of HitmanPro.Alert! The Details should be on the same line as the buttons if you run Beta3a.

Please uninstall and download from here:

32-bit http://dl.surfright.nl/beta/hmpalert.exe
64-bit http://dl.surfright.nl/beta/hmpalert_x64.exe

 

Hi Erik
I installed the last beta,but when i open this software http://systemexplorer.net/ this happens