HitmanPro.Alert 3

[wojek]

Ukazała się wersja HMPA 3 CTP3.

Informacje od dewelopera:

With each Community Technology Preview (CTP) of HitmanPro.Alert 3 we introduce new features for compatibility testing.
CTP1 was our first development release of HitmanPro.Alert 3 wherein we introduced our hardware-assisted exploit mitigations.
A few weeks later, with CTP2, we added the ability for users to add and protect custom applications through an easy-to-use Running Applications interface.

Now, for CTP3 we enabled our network inspection driver and Java lockdown, while we also expanded support to
all Intel Core i3, i5 and i7 processors for our hardware-assisted mitigations.

As before, this preview is released here at Wilders Security Forum only. A CTP is not to be used in production environments
and for extra clarity we also added the "Not for review" phrase to this build. This as not all features are fully implemented yet.

Release notes

Improved hardware-assisted control-flow integrity (CFI) for detection of sophisticated ROP attacks.
CFI now supports all Intel Core i3, i5 and i7 processors from November 2008 and later, including codenames Nehalem, Westmere, Sandy Bridge, Ivy Bridge and Haswell.
Improved stack-based ROP mitigation for legacy Windows XP in virtual environments.
Improved repetition-based detection of attack code that starts via the heap (Dynamic Heap Spray).
Improved recognition of attacker-executed processes.
Improved compatibility with local Java applications and games.
Improved Restart Application handling when altering exploit mitigations of in-use applications.
Improved malware scan after installation.
Improved detection of Java runtime and added more media file types to the Software Radar.
Enabled network inspection layer to analyze and log attack pages.
Enabled the Java Lockdown security feature to block communication channels from malicious Java applications in the browser.
Enabled the alert counters on the main window.
Fixed BSOD on legacy Windows XP running on physical machine with Intel Core processor from 2011 or newer.
Fixed prolonged “Please wait” during boot on some computers.
Fixed compatibility issue with video streaming on e.g. Magine.com, which employs Digital Rights Management (DRM).
Fixed compatibility issue with the Microsoft MPEG2 audio and video plug-in.
Fixed compatibility issue with iTunes for Windows.
Fixed a memory leak in internal message handling.
Fixed event ID 6281 that caused audit failures.
Removed "New Process" and "Deny New Process" from Exploit Mitigations as they are now automatic and integrated into other mitigations.
Updated the Exploit Test Tool with two additional return-oriented programming exploit techniques: “ROP – system() in msvcrt” and “ROP – WinExec() via anti-detour”.
Updated the Exploit Test Tool Manual with an important note (in paragraph 2.5.1) on testing in virtual environments, advantage of our hardware-assisted technology (paragraph 2.5)
over software stack-based approaches and background information on the two new ROP tests.

Remarks and known issues

Webcam Notifier works with webcams that use the Windows usbvideo.sys driver. Webcams using vendor specific drivers are currently not supported.
AutoIt applications like AdwCleaner show a warning when started. Temporarily disabling ‘Active vaccination’ in HitmanPro.Alert allows the AutoIt application to run.
The checkbox ''Show border around applications'' under ''Safety notification'' is currently checked and locked on purpose.
HitmanPro.Alert 3 is currently not compatible with Sandboxie on Windows Vista.
Sandboxie and Norton (Internet) Security can interfere with the drawing of the notification border around protected applications.
Agnitum Outpost Firewall on 64-bit versions of Windows is currently incompatible with HitmanPro.Alert 3.
The Export Address Table Access Filtering (EAF) module of Microsoft EMET 5.0 is currently incompatible with HitmanPro.Alert 3, but our Exploit Test Tool is compatible.
Microsoft EMET 4.1 Update 1 is fully compatible with HitmanPro.Alert 3.
Malwarebytes Anti-Exploit is currently incompatible with HitmanPro.Alert 3, but our Exploit Test Tool is compatible

Download

Please uninstall previous versions of Alert before installing CTP3.

Reporting issues

Please report issues via PM or via email: <!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e -->.
Please send me a PM if you need a product key for testing purposes.

Link do pobrania jest w oryginalnym poście na forum Wilders Security:

[Aby zobaczyć linki, zarejestruj się tutaj]