Hitman Pro Support and Discussion Thread

[Triple Helix]

Originally Posted by Kernelwars

Loving the addition of Dr. Web and G-data..

G-Data has been there for over a year but Dr.Web is new!

TH

[Kernelwars]

TH

[Triple Helix]

Originally Posted by Kernelwars

And ESET and Avira are gone now in the past few months!

TH

[Kernelwars]

All I care they still have Prevx.. Thats more than enough for me ...

Originally Posted by Kernelwars

All I care they still have Prevx.. Thats more than enough for me ...

But Prevx also causes the most false positives

[Triple Helix]

Originally Posted by Matthijs5nl

But Prevx also causes the most false positives

That's not true for the past 5 to 6 months that has changed and every product has FP's and some even deleted important Windows files not Prevx!

TH

[pabrate]

Originally Posted by Triple Helix

That's not true for the past 5 to 6 months that has changed and every product has FP's and some even deleted important Windows files not Prevx!

TH

That's true, I can confirm that it even has less FP's than most AV's I tried, only one with less FP's (NONE) is MSE.

Originally Posted by Triple Helix

That's not true for the past 5 to 6 months that has changed and every product has FP's and some even deleted important Windows files not Prevx!

TH

I am not complaining about Prevx to be honest, I am even thinking of buying it . And ofcourse all products have false positives and they differ in severity. But all the false positives I had with Hitman Pro were caused by Prevx.

[Triple Helix]

Originally Posted by Matthijs5nl

I am not complaining about Prevx to be honest, I am even thinking of buying it . And ofcourse all products have false positives and they differ in severity. But all the false positives I had with Hitman Pro were caused by Prevx.

I have said in the past that HMP does not update there database as fast as Prevx does so any FP's you get with HMP don't count IMO as I have both and if HMP detects something with the Prevx scanner I always check with a scan of Prevx and it is not detected!

Hope that helps to explain!

TH

[Cvette]

Is there a way to scan a single file or folder using Hitman Pro?

[Triple Helix]

Originally Posted by AlanMcAlan

Is there a way to scan a single file or folder using Hitman Pro?

Use the Right Click Scan on the file or folder! I know it's there for the paid version but not sure about the free version?

TH

It is there also for free version I think. But keep in mind that the contextmenu scan doesn't scan subfolders. Only the files in the main directory.

[Cvette]

Ahh thanks Trip, I had seen it before but it never use to work for me, so I just assumed I was doing it wrong.

Cheers!

[erikloman]

Hitman Pro 3.5.6 build 110 released (32-bit only; 64-bit will follow on Monday).

Change log

• Removes new variant of Bamital/Drooptroop trojan that is infecting explorer.exe and winlogon.exe or wininit.exe.
• Improved detection of infected system files protected by Windows File Protection.
• Improved replacement of infected system files with clean original versions.
• Improved handling of 16-bit MS-DOS files.
• Improved detection and removal of specific malware starting as library (DLL).
• Improved Early Warning Scoring (EWS) regarding malware faking file dates.
• Fixed a problem updating uninstall information (date and version).

This release is about removing a new variant of the Bamital/Drooptroop trojan that is currently spreading. This trojan is infecting both explorer.exe and winlogon.exe (XP) / wininit.exe (Vista/Win7) system files.

The trojan is redirecting web browser search results to malicious sites.

Curing the infected files is challenging as these are system files and in-use by the operating system (especially wininit.exe).

This build overcomes this challenge and successfully replaces the infected files with clean original versions (either from other hard disk locations or original Windows CD/DVD).

People who are interested in this trojan can PM me for a sample.

[Page42]

Updated to build 110 on two computers flawlessly
and scans ran fine.
Thank you for your ongoing quality product development.

[Triple Helix]

Thanks Erik for the update!

Cheers,

TH

[erikloman]

We have just posted a YouTube video on the Drooptroop/Bamital trojan infecting explorer.exe and winlogon.exe:
-http://www.youtube.com/watch?v=HVS0meV1IpA-

A quick search on Google shows that many computers are experiencing symptoms of the infection. Though most AVs are currently unable to disinfect.

[Saraceno]

Great video Erik. Hope someone is posting on the other forums mentioning HMP can fix this one.

[Boyfriend]

Thanks erikloman for update. It is useful feature for severely infected systems. I am now seriously considering purchasing Hitman Pro for even better protection of my data.
I have sent you PM. Please check it.

[andyman35]

Nice video erik
I'm impressed at how quickly HMP responds to real-world threats such as .lnk and this one,great work.

[jmonge]

thanks for making such a great scaner

[leofelix]

Thank you erikloman
updated fine in my Laptops with Vista SP 2 and XP SP3 (x86) and My desptop PC with Windows 7 ultimate x86, waiting eagerly for monday and the 64bit build

Regards

[SIR****TMG]

Fine here indeed

[ExtremeGamerBR]

Hello, I have a doubt, what makes the installation of it? It posted an entry in the registry? He opens a process at startup?

Thanks!

[Tarnak]

Originally Posted by erikloman

We have just posted a YouTube video on the Drooptroop/Bamital trojan infecting explorer.exe and winlogon.exe:
-http://www.youtube.com/watch?v=HVS0meV1IpA-

@ erikloman

I managed to download and save this file for playback...later on. Very interesting.

However, I was wondering if there is supposed to be any sound? I don't hear any.