Jump to content
Woomera

[SOLVED] MBAE and Hitmapro.Alert are incompatible?

Recommended Posts

after installing hitmanpro.alert everytime i start chorme before it loads up mbae pops up a windows saying an exploit has been blocked while chrome hasnt been loaded yet. its at the same time hma windows shows.

 

are these 20 incompatible? if yes then is the incompatibility on mbae side or hma?

Share this post


Link to post
Share on other sites

I was able to replicate the issue with MBAE 0.9.2.1400. However wih the new version 0.9.3 we are about to release I could not replicate it, so it looks like it might be fixed already in the next version.

 

Please keep an eye on this forum for announcement of 0.9.3 and try again when the new MBAE version is released.

 

Thanks!

Share this post


Link to post
Share on other sites

MBAE version 0.09.3.1000, HitmanPro.Alert version 2.0.10.45, In Windows 7 32-bit, I open two browser at the same time, for example(IE+Firefox), and MBAE will still report that it block an exploit, which was hmpalert_update.exe.

 

Also that HitmanPro.Alert can run(inject dll to browser) under Sandboxie 4.04 without any other configuration, but MBAE can't, I think you can take a look of their product.

Share this post


Link to post
Share on other sites

Does it still get blocked if you only open one browser at a time? When I tested it I only opened one browser and it did not block HMP.Alert.

Share this post


Link to post
Share on other sites

Very strange.

If I open Firefox 23 only, will get blocked; if I open IE9 only, nothing happened. If I open them together, certainly one of them will get blocked(maybe IE, maybe FF),also, open two IE will get blocked too.

Share this post


Link to post
Share on other sites

unfortunately, I have the same problem. I open only (one) Firefox.

I add HitmanPro.alert to the MBAE exclusions, but it works only

until the next reboot, and in the exclusions tab I have only date,

no hash and file path is present.

Share this post


Link to post
Share on other sites

I temporarily uninstalled MBAE (BTW, it's good that both driver .sys and library .dll of MBAE

are in the main 'Program Files' folder), but I had further problems with

 

For people who're having problem : simply go to "logs" tab,and select "hmpalert.exe blocked through running from Chrome/Firefox/IE" and click on exclude,same for HMPA Update.exe.

It worked for me only until the next reboot; maybe, it's because of my old OS (Win XP Home)?

 

I temporarily uninstalled MBAE (BTW, it's good that both the driver .sys and the library .dll of MBAE

are in the main 'Program Files' folder), but I had further problems - most probably

with compatibility of HMPA and Online Armor (Program Guard), but that's another story :)

Share this post


Link to post
Share on other sites

Can some of you with HMP.Alert try to replicate the issue of the "disappearing exclusion" but this time instead of a reboot, simply exit MBAE and run it again. Is the exclusion also gone when you do this?

Share this post


Link to post
Share on other sites

OK, maybe I will try, but I finally uninstalled HMP.alert,

because it seemed to be in conflict with Online Armor (Program Guard)

Share this post


Link to post
Share on other sites

It works for me though (even with restart) ,I'm using Windows 7 SP1 32-Bit (don't ask why am I using 32-Bot)

What do you mean by "it works for me"? You mean the exclusions work and they are persistent after a reboot?

Share this post


Link to post
Share on other sites

As I have reported by mail some time ago - for me HitmanPro.Alert and MBAE still doesn't work. Tried adding hmpalert_update.exe to exclusions, but it appeared as a blank input. It was still there (but still as blank) after reboots, but MBAE still generated alert when starting protected browser.

 

What's strange and might be insteresting:

- I have had Maxthon installed and there were no alert from MBAE while starting it (which was done randomly by its updater) - but I think that there were no alert because MBAE doesn't protect Maxthon,

- while starting Firefox / IE the alert appears, but only for the first time the browser is started. After that, HMP Alert's popup shows up correctly and there is no alert from MBAE.

 

I was using Windows 8 Pro x64.

 

I would try to reproduce that issue, but now there is another one - I have installed Windows 8.1 Pro x64 RTM and MBAE doesn't start at all, there is an issue with driver loading, but I have already started new topic, in order not to litter that one.

Share this post


Link to post
Share on other sites

We have repliacted the problem with HMP.Alert and will be fixing it in one of the next beta versions.

 

I would try to reproduce that issue, but now there is another one - I have installed Windows 8.1 Pro x64 RTM and MBAE doesn't start at all, there is an issue with driver loading, but I have already started new topic, in order not to litter that one.

This is known issue #7:

http://forums.malwarebytes.org/index.php?showtopic=130688

 

Will be fixed when 8.1 becomes final. Right now it's still beta.

Share this post


Link to post
Share on other sites

Hi Pedro!

Was this fix released yet?

 

Something happened this morning.

I use HPM.Alert with FF. I have no problem opening FF.

If I then click on a hyperlink in a email, a new tab opens in FF, no problem.

However, if FF is closed when I click on the email hyperlink, MBAE alerts me when FF is launched.

 

Don't know if this is related with HPM.Alert.

 

Best!

François

Share this post


Link to post
Share on other sites

No.

There's indeed a problem with HMP.Alert.

I have in fact removed it altogether.

Share this post


Link to post
Share on other sites

so, would it be possible that HMP.Alert is an exploit? :unsure::)

 

independently of the problem with HMPA, I hope the next build (when?)

will solve the problem with vanishing trash icon in Windows XP.

Share this post


Link to post
Share on other sites

No.

There's indeed a problem with HMP.Alert.

I have in fact removed it altogether.

Cool, thanks for confirming!!

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.